OCR IT National Level 2
4. Cyber-security and Legislation
4.4 Laws Relating to the Use of IT Systems
4.4 Laws Relating to the Use of IT Systems
Overview
In the UK, there are several important laws that control how IT systems are used. These laws help protect people, organisations, and information.
The Computer Misuse Act stops people from hacking or using computers without permission.
The Copyright, Designs and Patents Act protects creative work like music, software, and videos from being copied without permission.
The Data Protection Act makes sure personal data is collected and used fairly and kept safe.
The Freedom of Information Act gives people the right to ask for information held by public organisations.
The Health and Safety at Work Act makes sure employers keep staff safe when using computers and other IT equipment.
Knowing these laws helps you understand your rights and responsibilities when using technology. Following them keeps you safe, protects others, and avoids legal trouble. These rules are important for everyone in today’s digital world.
Technology in the news
In April 2025, Marks & Spencer was hit by a massive cyber-attack. Online orders stopped, click-and-collect was shut for weeks, and the company lost around £300 million. Some customer data was stolen, though payment details were safe. Shoppers were frustrated, and M&S’s reputation was damaged.
Cyber-attacks don’t just affect big companies, they can impact everyday people trying to shop, work, or access services.
Discussion question: If hackers steal data or cause chaos without physically taking anything, should the punishment be as serious as if they had robbed a shop? Why or why not?
Stops hacking and unauthorised access to computers
Protects data and systems from cyber-attacks
Protects creative work such as music, software, and videos
Prevents copying, sharing, or using work without permission
Ensures personal data is collected and used fairly
Requires organisations to keep personal data safe
Allows the public to request information from public bodies
Encourages openness and transparency
Protects employees when using IT equipment
Requires safe working environments and equipment setup