Legislation relevant to Computer Science The Data Protection Act 2018…

The idea

Computer scientists must know the laws that govern data, access and creative work. The Data Protection Act 2018 controls how personal data is collected, stored and used, giving individuals rights such as access to their data and requiring organisations to keep it accurate and secure. The Computer Misuse Act 1990 makes unauthorised access to computer material, unauthorised access with intent to commit further offences, and unauthorised modification of computer material criminal offences. The Copyright, Designs and Patents Act 1988 protects original creative and design work, so copying software, music or images without permission can infringe copyright. Software licences set the terms of use: proprietary licences restrict copying, modification and redistribution, while open source licences allow users to view, modify and share the source code, often under conditions.

What earns the marks

• States the purpose of the Data Protection Act 2018: to protect personal data and give individuals rights over information held about them.
• Describes at least one Data Protection Act requirement or right, such as keeping data secure and accurate, or allowing individuals to request a copy of their data.
• States that the Computer Misuse Act 1990 criminalises unauthorised access to computer systems, for example hacking into an account or network.
• Distinguishes levels of offence under the Computer Misuse Act, such as unauthorised access alone compared with unauthorised access intending to commit a further crime or unauthorised modification of data.
• States that the Copyright, Designs and Patents Act 1988 protects original works, including software, and that copying or distributing without permission can be unlawful.
• Contrasts proprietary and open source software licences, for example proprietary software restricts copying and modification while open source software permits access to and modification of source code.
• Applies the correct law or licence type to a short scenario, such as identifying the Computer Misuse Act when an employee accesses a colleague's account without permission.

Common mistakes and how to put them right

• Confusing the Computer Misuse Act 1990 with the Data Protection Act 2018.

  Put it right: The Computer Misuse Act deals with unauthorised access and modification of computer systems, while the Data Protection Act deals with personal data handling.

• Assuming open source means no licence or no rules.

  Put it right: Open source software is still licensed; the licence permits source code access and modification, often with conditions such as attribution or share-alike.

• Believing that copying software for personal use is always allowed.

  Put it right: The Copyright, Designs and Patents Act 1988 protects software, so copying without the licence holder's permission can infringe copyright.

Exam tips

• Match the law to the action in the scenario: ask whether the issue is data handling, unauthorised system access or copying creative work.
• Name the Act and year once, then spend the marks explaining how it applies rather than repeating the title.
• For licence questions, compare both types directly using a feature such as access to source code, modification rights or redistribution.