Data Security and Legal Issues

Data Security & Legal Issues

Online services, as we know, have raised concerns regarding security and privacy. Your personal data are at risk of being stolen and exposed (if those data included bank details, then you may be done for!). This is why security measures have been taken to ensure people's data security. First, we'll go through legal issues associated with data security. 

* Data Protection Act: An Act to make new provision for the regulation of the processing of information relating to individuals, including the obtaining, holding, use or disclosure of such information.

* Information Commissioner: The role of Information Commissioner differs from nation to nation. Most commonly it is a title given to a government regulator in the fields of freedom of information and the protection of personal data in the widest sense. The office often functions as a specialist ombudsman service. 

* Data Controller: A data controller is the person who determines the purposes for which, and the manner in which, any personal data is, or is likely to be, processed.

* Data subject: The Data Subject is a living individual to whom personal data relates.

* Data Users: People who use the information

* Personal Data: Personal Data is data that relates to a living individual who can be identified:-

• a) From those data, or
• b) From those data and other information which is in the possession of, or is likely to come into the possession of the Data Controller.

This includes business data if there is a named contact. 

Okay, what about computer misuse act? The Computer Misuse Act 1990 was designed to protect the integrity of computer systems by deterring the activities of hackers. Here's a brief of the main principles associated with the act:-

1) If you collect data about people for one reason, you can not use it for a different reason

2) You can not give people's data to other people or organizations unless they agree

3) People have the right to look at data that any organizations store about them

4) You can not keep the data for longer than you need to and it must be kept up to date

5) Most organizations that store data about people have to register with the Information Commissioner’s Office

6) If you store data about people you must make sure that it is secure and well protected

7) If an organization has data about you that is wrong, then you have a right to ask them to change it

8) You cannot send the data to places outside of the European Economic Area.


references:-
en.wikipedia.com