In this article I am going to discuss the GDPR and the Computer Misuse Act the legal issued concerning them.
GDPR
GDPR stands for general data protection act is a law/regulation that protects data and information from unauthorised access and unethical use when keeping and transforming data. There are 7 principles to the act which are:
The principle makes sure that organisations are processing the lawfully. The purpose of the data collected by the organisations must be set and clear, the collected data should always be processed according to the reasons it was originally collected. Organisations are only allowed to access data that is relevant to the purpose that they are trying to achieve.Any inaccurate or incomplete data must be erased and rectified. The organisation must always ask if what they have is up to date. Personal data must be kept for no longer than is necessary meaning that the that must be erased as soon as the individual is no longer a costumer for the company. Any data processed by an organisation must be processed in a way the ensures the security and safety of the data by using appropriate safety methods.
Computer misuse act
The computer misuse act is a UK parliament act that provides guidance on the legality of dealing with data like processing, collecting and storing data, making sure the data protected and not accessed and manipulated by unauthorised parties. The act specifically makes unauthorised access to computers illegal, it also makes it illegal to access computer materials to commit crime, unauthorised modification and making and supplying or obtaining anything which can be used in computer related crimes.
Penalties:
Unauthorised access to the data can get you up to six months in prison and or up to a £5000 fine.
Unauthorised access with intent to commit a crime can get you up to a 5-year prison sentence and or an unlimited fine
Unauthorised modification of data can get you up to a 5-year prison sentence and or an unlimited fine
unauthorised modification and making and supplying or obtaining anything which can be used in computer related crimes van get you up to a 10-year sentence and or a unlimited fee