Article

Legislation

Monday, 10 November 2025

Info

This is a set of cut-down notes based on Advanced Notes - 1.5.1 Computing related legislation - OCR Computer Science A-level.

The Data Protection Act 1998

Info

This has been superseded by the General Data Protection Regulation (GDPR) 2018 and Data Protection Act 2018.

This legislation protects individuals’ data in eight specific ways:

Info

An individual’s data is formally known as the ‘data subject’.

  1. Personal data shall be processed fairly and lawfully
  2. Personal data shall be obtained only for one or more specified and lawful purpose
  3. Personal data shall be adequate, relevant and not excessive for its purpose(s)
  4. Personal data shall be accurate and where necessary kept up to date
  5. Personal data shall not be kept for longer than is necessary for its purpose(s)
  6. Personal data shall be processed in accordance with the rights of data subjects under this Act
  7. Appropriate technical and organisational measures shall be taken against unauthorised or unlawful processing of personal data and against accidental loss or destruction of, or damage to, personal data
  8. Personal data shall not be transferred to a country or territory outside the European Economic Area, unless that country or territory ensures an adequate level of data protection

Info

You do not have to memorise these points.

Whilst also outlining rights such as the right to request a copy of their data, right to correct their data, right to prevent marketing using provided contact details, etc.

The Computer Misuse Act 1990

Info

aka. CMA.

This legislation concerns the malicious use of computers, outlining three primary offences:

  1. Unauthorised access to computer materials.
  2. Unauthorised access with intent to commit further offences.
  3. Unauthorised modification of computer material.

The consequences of the second and third offences are generally ​ worse ​ than the first, with each offence being punishable with ​ imprisonment​.

The Copyright, Design and Patents Act 1988

This legislation was brought in to protect people’s property online, covering logos, music recordings, etc. It automatically applies and does not expire until 25 - 70 years after the death of the creator, depending on the type of work.

It was extended in 1992 to include computer programs as a form of literary work.

If an individual believes that their work has been copied, it is ​ their responsibility ​ to take action under the Act.

The Regulation of Investigatory Powers Act 2000

Info

aka. RIPA.

This legislation covers investigation, surveillance and interception of communication​ by ​public bodies.

I.e., it permits the Secret Intelligence Service/MI6 to legally wiretap phones, if a warrant is issued.

It ensures internet service providers (ISPs)​ and​ mobile phone companies​ to give up information upon request from an authorised authority and to ensure that their networks have sufficient hardware installed to facilitate surveillance.

Controversy

This act is highly controversial, in par due to the fact its powers extend to small agencies, such as local councils, and therefore often seen as an invasion of privacy/improperly used.