Legal Implications

Computer Misuse Act

If someone hacks into your computer

writes or distributes virus

Data Protection Act

covers how personal information may be held and for what purpose

Data Processor

Data Subject

Data Controller

the 8 protection principals

  1. Personal data should be fairly and lawfully processed
  1. Personal data should only be used or disclosed for the specified purpose
  1. Personal data should be adequate, relevant and not excessive
  1. Personal data should be accurate and kept up to date
  1. Information should not be kept any longer than necessary
  1. Data must be processed in accordance with the rights of the data subjects
  1. Security measures should prevent unauthorised access or alteration of data
  1. Personal data should not be transferred to countries outside the EU, except to countries with adequate data protection legislation

The person who determines the purpose for which and the manner in which the personal data is to be processed

The person who processes the data on behalf of the data controller




The individual whose personal data is being held


Copyright, Design and patent Act


subject data have to

See any data held about them within 40 days for a payment of a fee

Have any errors in the data corrected

Compensation for distress caused if the Act has been broken

Prevent processing for direct marketing by writing to the data controller

Prevent processing by automated decision-making (when a computer program makes decisions about your data rather than a person)

Communications Act

click to edit