AQA 8525 · Section 3.7 · Impact of Technology

Legal
Issues

Computer Misuse Act · Copyright · GDPR · Freedom of Information

CSZoneAQA GCSE Computer Science 8525

Computer Misuse Act 1990

UK Law on Hacking and Unauthorised Access

Offence	Example	Max sentence
Unauthorised access	Logging into someone else's account	2 years
Unauthorised access with intent	Hacking to commit fraud/theft	5 years
Unauthorised modification	Installing malware, deleting files	10 years

Note:Even accessing your own workplace system outside working hours without permission can be an offence.

Protecting Digital Creations

Copyright protects original works — software, music, images, text — automatically from the moment of creation. Copying, distributing, or modifying protected work without permission is illegal. Software is usually protected for the author's life + 70 years.

Open source software — copyright still exists but the owner grants others permission to use, modify, and distribute (e.g. Linux)

Piracy — illegally copying and distributing software/music/film. Costs the creative industry billions per year.

GDPR and Data Protection

UK GDPR and the Data Protection Act 2018

Personal data must be collected lawfully with consent or legitimate purpose

Data must be accurate and kept up to date

Data must be kept secure — organisations must protect against breaches

Data may only be kept for as long as necessary

Individuals have the right to access their data and request deletion

Exam Practice

Have a go at this question

AQA-style question

A company illegally downloads software without paying. State which law has been broken and describe one consequence for the company.

2 marks

The Copyright, Designs and Patents Act 1988 [1]. The company could face a fine or legal action from the software developer/publisher [1].

Key Takeaways

What to Remember

Computer Misuse Act 1990: hacking/unauthorised access is illegal

Copyright Act 1988: protects software, music, images from copying without permission

UK GDPR / Data Protection Act 2018: governs how personal data must be handled

Know the name and purpose of each act — exams ask you to match law to scenario