Data Protection Act
Dec 23, 2015
Data Protection Act
Need;
DPA Questions x13 Bite size Video Poster DPA Flash Cards
Riddle – What am I?
What can you hold without ever touching or using your hands?
Your breath.Clue
Today’s Lesson..
Data Protection Act (1998) What Data is stored? Watch a short video; Gain information; Create a poster; Present the poster to the class.
Data protection Act (1998)
Unit 3 – L.O 2: Understand the issues related to the use of information.
P3 – Explain the issues related to the use of information.
M2 – Assess how issues related to the use of information affect an organisation.
Who stores data about you?
Information stored by kitchen staff
Name Finger print Date of birth School year Home address Home phone number Money left on your account
What’s good about using
finger prints?
Benefits Drawbacks
Fast access to your information
Needs a database to hold the information
They know your history Information must be regularly updated or it could be wrong
There is less risk of things being missed or mistakes being made
Needs employees to actually input the information
Your account balance can be updated quickly
Needs security measures to be in place
You don’t have to remember your information
Data Protection Act (1998)• What is the Data Protection Act
(1998) and why was it created?
• What are the eight principles of the Data Protection Act?
• Data Protection Act: What rights do we have?
• What is an Information Commissioner, Data Controller and Data Subject?
• Are there any exemptions to the Data Protection Act?
Bite size video
http://www.bbc.co.uk/schools/gcsebitesize/ict/legal/0dataprotectionandmisuse_act.shtml
Data Protection Act (1998)
What is it and why was it created?
The Data Protection Act (DPA) is a law designed to protect personal data stored on computers or in an organised paper filing system.
It was created to protect individuals from misuse of this data.
Data Protection Act (1998)What are the eight principles of it?
1. Data must be kept secure;
2. Data stored must be relevant;
3. Data stored must be kept no longer than necessary;
4. Data stored must be kept accurate and up-to-date;
5. Data must be obtained and processed lawfully;
6. Data must be processed within the data subject rights;
7. Data must be obtained and specified for lawful purposes;
8. Data must not be transferred to countries without adequate data protection laws.
Data Protection Act (1998)What is an Information Commissioner, Data
Controller and Data Subject?
Information Commissioner: Person who has the power to enforce the Act.
Data Controller: Person or Company that collects and keeps data about people.
Data Subject: Person who has data about them stored outside their direct control.
Data Protection Act (1998)What rights do we have as data
subjects?• To be supplied with the data held about us;
• To change incorrect data;
• To prevent data being used about us if it will cause distress;
• To stop data being used in attempts to sell us something;
• To use the law to gain compensation.
Types of Personal data
Some data and information stored on a computer is personal and needs to be kept confidential.
People want to keep their pay, bank details, and medical records private and away from the view of just anybody.
If someone who is not entitled to see these details can obtain access without permission it is unauthorised access.
The Data Protection Act sets up rules to prevent this happening.
Types of Personal data
Personal data is about living people and could be
Sensitive data is also about living people, but it includes one or more details of a data subject's
Their name Racial or ethnic origin
Address Political opinions
Medical details Religion
Banking details Membership of a trade union
Health
Criminal activity
Data Protection Act (1998)Are there any exemptions to the Data Protection Act?
• Any data held for National Security reasons e.g. MI5
• Police can access personal information in order to solve crimes.
• The taxman can access personal information to ensure people pay their tax!
• Any data held for domestic purposes at home e.g. birthday lists, address books.
Registration with the Information Commissioner
Any organisation or person who needs to store personal information must apply to register with the Information Commissioner.
• Data controllers must declare what information will be stored and how it will be used in advance. This is recorded in the register.
Each entry in the register contains:• The data controller's name and address.• A description of the information to be
stored. • What they are going to use the
information for. • Whether the data controller plans to pass
on the information to other people or organisations.
• Whether the data controller will transfer the information outside the UK.
• Details of how the data controller will keep the information safe and secure
Data Protection PPT – Slides 3+5
Use Bold
for
important
words Large text
Different fonts.
Have a theme
Make the
important
information
clear!
Easy to read
Add
images
Task – DPA (1998) Using the notes you have made; create a
poster targeted at ICT pupils aged 14 – 16.
A4
Plenary
Flash Cards