Hopgood Maddy legislation

More like this

Map IEC/ISO 27001:2013 Annex A - English

by Grandt Grandt

database management system

by Miguel eduardo racine soto

Information Security Architecture

by Cyber Threat

The Impact of Social Media on Children, Adolescents, and Families

by rini tri

Legislation

Freedom of information act

Covered under the DPA.

Public access to any recorded information held by public authorities.

Health and safety at work act

Powers of inspector

Right to see documents and take copies

Take substances or equipment

Right to dismantle equipment

Right to investigate and examine

Rights of entry at reasonable times

Employees responsibility

Co-operate with their employers

Take care of their own health and safety

Employers responsibilites

Talk to safety representatives

Provide a written safety policy/risk assessment

Safe working environment

Safe place of employment

Provide information, training, instruction and supervision

Provide and maintain safety equipment

1974

Computer misuse act

Stop unauthorised access

1990

Hacking

Black hat

Modify data illegally

Grey hat

Without malicious intent

White hat

Permission

Copyright

Forbids

Renting software

Using software on a network

Selling a copied copy

Copying software or pictures to a friend

1988

Right to control ways creator's data is used

GDPR

Includes the right to be forgotten

Same as DPA except for some differences

Those processing criminal data need official authority

Child consent data processing down to 13 years old

Fines for breach of law

More serious offences result in £20 million fine or 4% of turnover

Smaller offences result in £10 million fines or 2% of turnover

effects EU citizens

Data protection act

Computer and paper

2018

What rights do data subjects have?

Exemptions to the rights

Examination results

National security

Police investigations

Stop or restrict the processing of their data

Be informed about how their data is being used

Access their personal data

Have incorrect data updated

Have their data erased on request

Data protection principles

Not transferred to unprotected countries

Handled in a way that ensures securely

not kept for longer than necessary

Accurate

Used adequately and relevant

For specified purposes

Used fairly