Open the app
  1. Home
  2. Lessons
  3. GCSE & IGCSE Computer Science
  4. Personal data: ethics and law

Personal data: ethics and law

🎬 The doodle video for this lesson is coming soon. Subscribe on YouTube to see it first.

Apps, shops and websites collect huge amounts of data about us. Who controls it, and what are they allowed to do with it?

Personal data

Personal data is information about a living person who can be identified from it: name, address, date of birth, photos, location, browsing habits.
It is valuable to organisations for targeted adverts and services, which is why it must be protected.

The key issues

Privacy: people have a right to keep information about themselves private.
Consent: people should agree to their data being collected and know what it will be used for.
Ownership: who owns data once it has been collected?
Misuse: data may be sold, leaked, used for something different or used to commit identity fraud.

Data protection law

In the UK, the Data Protection Act 2018 and the UK GDPR control how personal data is used. Organisations must:
use data fairly, lawfully and transparently, only for the stated purpose;
collect only what they need and keep it accurate;
not keep it longer than necessary, and keep it secure.
People have rights, such as asking to see the data held about them.
Worked example

A fitness app shares users' location data with advertisers without telling them. Which issues does this raise?

  1. Users did not give consent for this use.
  2. Their privacy is broken and the data is being misused for another purpose.

Answer: Lack of consent, loss of privacy and misuse of data

Key idea

Personal data identifies a living person. Key issues are privacy, consent, ownership and misuse. UK law (Data Protection Act 2018 and UK GDPR) requires data to be used fairly, kept accurate, secure and only as long as needed.

Check you have got it

Answer 6 quick questions with instant marking. If you get one wrong, GCSE-ready shows you why and gives you another go. It is free, and you do not need an account.