Mission 1 · Spec 1.5.1
Computing-related legislation
The Data Protection Act, the Computer Misuse Act 1990, the Copyright, Designs and Patents Act 1988 and the Regulation of Investigatory Powers Act 2000.
- Starter 5 min
- Learn 15 min
- Lab 15 min
- Quiz 10 min
- Exam 15 min
Can they read your messages?
Could the police or security services legally read your private messages? Under what circumstances?
Reveal
Yes, with authorisation, for purposes such as national security or preventing serious crime. The Regulation of Investigatory Powers Act 2000 governs this interception and surveillance (now alongside the Investigatory Powers Act 2016).
The four laws
Data Protection Act
The spec names the 1998 Act; it has been replaced by the DPA 2018 (UK GDPR). Personal data must be processed lawfully, fairly and transparently; collected for specified purposes; adequate, relevant and limited; accurate; kept no longer than necessary; and secure. Data subjects have rights, e.g. to access their data.
Computer Misuse Act 1990
Offences: (1) unauthorised access to computer material; (2) unauthorised access with intent to commit or facilitate further offences; (3) unauthorised acts intended to impair the operation of a computer, e.g. malware, DoS.
Copyright, Designs and Patents Act 1988
Protects creators' original work, including software, from being copied, modified or distributed without permission. Software licences set the terms of use.
Regulation of Investigatory Powers Act 2000
Regulates how public bodies can carry out surveillance and intercept communications. Can require ISPs to provide access and data, and individuals to hand over encryption keys.
Which law applies?
Exam-style questions
1. A hacker gains access to a company's network and installs ransomware. Explain which offences under the Computer Misuse Act 1990 have been committed.
[3 marks]Mark scheme
- Unauthorised access to computer material (1)
- Unauthorised access with intent to commit further offences, e.g. blackmail / extortion (1)
- Unauthorised acts impairing the operation of a computer, by encrypting data (1)
2. Describe two principles of data protection that a school must follow when storing student records.
[4 marks]Mark scheme
- Any two principles, each named (1) and applied to the school (1), e.g. kept securely (access controls / encryption on the system); kept no longer than necessary (deleted after students leave); accurate and up to date (parents can correct details); used only for the stated purpose.
TUTOR NOTES
- Currency: the specification names the DPA 1998; OCR accepts current legislation (DPA 2018 / UK GDPR).
- Exam habit: apply the law to the scenario rather than reciting it.
Mission 2 · Spec 1.5.2
Moral and ethical issues
Computers in the workforce, automated decision making, artificial intelligence, environmental effects, censorship, monitoring, piracy, and layout, colour and character sets for different users.
- Starter 5 min
- Learn 15 min
- Plan 20 min
- Quiz 10 min
- Write 20 min
Who decides?
An algorithm decides who gets a mortgage. It's faster and cheaper than a human, but can't explain its decisions. Is that acceptable?
Reveal
Consider speed and consistency against bias in training data, accountability, the right to an explanation, and what happens when it's wrong. That's the kind of balanced discussion 12-mark questions reward.
Topics on the spec
Computers in the workforce
Automation replaces some jobs and creates others; productivity rises; retraining needed.
Automated decision making
Fast and consistent, but can reflect biased data; hard to challenge; who is accountable?
Artificial intelligence
Medical diagnosis, self-driving cars, recommendation systems; questions of bias, transparency, responsibility and jobs.
Environmental effects
Energy use of data centres, e-waste, rare materials; but also smart grids and reduced travel.
Censorship and the internet
Protecting people from harmful content versus freedom of speech; governments restricting information.
Monitoring behaviour and analysing personal information
Employers monitoring staff, targeted advertising, data brokers, profiling.
Piracy and offensive communications
Illegal copying harms creators; trolling and online abuse; balancing freedom of expression.
Layout, colour paradigms and character sets
Designing for different cultures and users: colour meanings vary, some users are colour-blind, and languages need Unicode and right-to-left layouts.
12-mark questions are marked in levels. Top-band answers show detailed knowledge, apply it to the context, consider several stakeholders and viewpoints, and reach a supported conclusion.
Extended answer planner
Exam-style question
1. A hospital plans to use artificial intelligence to prioritise which patients see a doctor first in A&E. Discuss the moral, ethical and legal issues this raises.
[12 marks]Mark scheme (levels)
- Level 3 (9–12): thorough knowledge; well applied to the scenario; balanced discussion of several issues and stakeholders; well-supported conclusion.
- Level 2 (5–8): reasonable knowledge, some application and some balance.
- Level 1 (1–4): basic points with little application.
- Indicative content: faster, consistent triage; frees staff; bias in training data could disadvantage some groups; who is accountable for a wrong decision; patients' right to an explanation; sensitive health data under the Data Protection Act; security of the system (Computer Misuse Act); staff trust and job roles; need for human oversight.
TUTOR NOTES
- Routine: plan for 5 minutes using the grid, then write for 15–18 minutes.
- Common weakness: one-sided answers; always include counter-arguments and a judgement.