Key UK Legislation

Key UK Legislation

1. Data Protection Act 2018 (inc. UK GDPR)

Purpose: Protects personal data and gives individuals control over their information.

• Data must be collected fairly and lawfully
• Data must be kept secure from unauthorized access
• Data must not be kept longer than necessary
• Data must be accurate and up to date
• Data must be used only for specified purposes
• Individuals have the right to be forgotten (data deleted)

2. Computer Misuse Act 1990

Purpose: Prevents computer crimes and unauthorized access to systems.

• Section 1: Unauthorized access to computer material (hacking) - up to 2 years prison
• Section 2: Unauthorized access with intent to commit further offences - up to 5 years
• Section 3: Unauthorized modification of computer material (viruses, deleting data) - up to 10 years
• Section 3A: Making, supplying, or obtaining tools for computer misuse - up to 2 years

3. Copyright, Designs and Patents Act 1988

Purpose: Protects intellectual property and creative works.

• Illegal to copy software without a license
• Illegal to download music, films, books without permission
• Illegal to copy images and text from websites without permission
• Using pirated software is a criminal offence
• Protects creators' rights to profit from their work

4. Freedom of Information Act 2000

Purpose: Gives the public right to access information held by public authorities.

• Citizens can request information from government bodies
• Promotes transparency and accountability
• Some exemptions for national security and personal data
• Authorities must respond within 20 working days