Legal Impacts Flashcards

All 5 cards in this deck

Give two things the law requires an organisation to do with the personal data it stores.

Any two of: keep it secure from unauthorised access; only collect the data it needs; not keep it for longer than necessary; only use it for the purpose it was collected for; keep it accurate.

Is it legal to access someone else's computer system or data without permission, if nothing is changed?

No. Gaining unauthorised access to a computer system (hacking) is a crime in itself. Changing or deleting data, or spreading malware, are further crimes.

Why do autonomous vehicles raise a legal problem when they crash?

It is unclear who is liable: the person in the vehicle, the manufacturer or the software developer. Driving and insurance laws written for human drivers need updating.

Why can storing personal data with a cloud storage provider raise a legal issue about where it is kept?

The provider's servers may be in another country, where different data protection laws apply to the data.

Which legal question arises if data an organisation stores with a cloud provider is stolen?

Who is responsible for the breach: the organisation that collected the data or the cloud provider that stored it. The organisation still has a legal duty to keep personal data secure.