Legislation for e-commerce by Emily Garoghan https://padlet.com/emily_garoghan/legislation en-us 2017-11-01 09:15:34 UTC 2017-11-01 09:59:41 UTC hello@padlet.com The Data Protection Act controls how your personal information is used by organisations, businesses or the government. https://padlet.com/emily_garoghan/legislation/wish/202416183 2017-11-01 09:19:39 UTC https://padlet.com/emily_garoghan/legislation/wish/202416183 emily_garoghan https://padlet.com/emily_garoghan/legislation/wish/202416351 Customers paying by credit card are protected by the
Consumer Credit Act for payments up to £25,000. 
Payment cannot be made by the customer, the business
will still receive the money from the bank 
Allows confidential purchase.
This is good for the customer, but can be
disadvantageous to a company as it means that, even
after a purchase has been completed, there is the
possibility of the customer asking for a refund.]]> 2017-11-01 09:20:39 UTC https://padlet.com/emily_garoghan/legislation/wish/202416351 The Computer Misuse Act is designed to protect computer users against wilful attacks and theft of information. Offences under the act include hacking, unauthorised access to computer systems and purposefully spreading malicious and damaging software (malware), such as viruses. https://padlet.com/emily_garoghan/legislation/wish/202416376 2017-11-01 09:20:48 UTC https://padlet.com/emily_garoghan/legislation/wish/202416376 Hacking has been around almost as long as the Internet; some people just love to try and break into a computer system.Prior to 1990, there was no legislation in place to tackle the problems caused by hacking. Although everyone knew that it was wrong and should be against the law, there was nothing that anyone could do about it.As the problem grew, it became apparent that specific legislation was needed to enable hackers to be prosecuted under the law.So, in 1990, the Computer Misuse Act was passed.The Computer Misuse Act (1990) recognised the following new offences:Unauthorised access to computer materialUnauthorised access with intent to commit or facilitate a crimeUnauthorised modification of computer material.Making, supplying or obtaining anything which can be used in computer misuse offences. https://padlet.com/emily_garoghan/legislation/wish/202416483 2017-11-01 09:21:24 UTC https://padlet.com/emily_garoghan/legislation/wish/202416483 https://padlet.com/emily_garoghan/legislation/wish/202416678 Data Protection Act 1984, 1998, 2000

 The data protection act applies to computer and data, how it is used and stored. It makes sure that a person's privacy is maintained, the data must be stored and lawfully processed. This means that the owner of the data must know how it will be used so that is not used for some other reason. An organisation can only have information that is relevant to their needs, they must not have information that is not needed. The data can only be kept for as long as it is needed then it must be destroyed. They must not pass it on to others without your agreement. They should keep it secure so that it may not be copied, stolen or used by unauthorised people.

 

If an organization breaks the data protection act, a person can get compensation. For example if they break principle 7 [All data must be kept secure]. A person can try to get compensation for any damage or upset they may have had.

 

The data must be processed in a fair and lawful way.

It must be processed for limited purposes.

It must be adequate – you only keep what you need. It must be relevant, it must be connected to your business for example hairdressers will not need details of your work. It must not be excessive – you must have too much detailed information.

It must be accurate and up to date.

The information must not be kept longer than you need.

It must be processed in line with your rights. 

It must be secure to prevent unauthorised people from accessing, changing or stealing it.

It cannot be sent to other countries without proper protection

People have rights to see what information is kept about them on most computer and paper records

I picked this quote from SANS policy because the user should not share their passwords and share their account with other person. They also should make sure the password is secure so no one could steal the data they have stored on the system.

"Keep passwords secure and do not share accounts. Authorized users are responsible for the security of their passwords and accounts. System level passwords should be changed quarterly, user level passwords should be changed every six months”

]]> 2017-11-01 09:22:26 UTC https://padlet.com/emily_garoghan/legislation/wish/202416678 The Electronic Commerce (EC Directive) Regulations 2002, SI 2002/2013, incorporates the EU Electronic Commerce Directive 2000/31/EC into the law of the United Kingdom. They apply to contracts concluded by electronic means over distance whereby the buyer is a consumer. https://padlet.com/emily_garoghan/legislation/wish/202416827 2017-11-01 09:23:12 UTC https://padlet.com/emily_garoghan/legislation/wish/202416827 https://padlet.com/emily_garoghan/legislation/wish/202416832  The Freedom of Information Act 2000 provides public access to information held by public authorities. 
  • public authorities are obliged to publish certain information about their activities; and
  • members of the public are entitled to request information from public authorities.
 
]]> 2017-11-01 09:23:13 UTC https://padlet.com/emily_garoghan/legislation/wish/202416832 emily_garoghan https://padlet.com/emily_garoghan/legislation/wish/202417340 The Copyright, Designs and Patents Act (1988)
protects all works such as music, art, writing and
programming code.

]]> 2017-11-01 09:26:23 UTC https://padlet.com/emily_garoghan/legislation/wish/202417340 https://padlet.com/emily_garoghan/legislation/wish/202417415  
What you should report: 

You should report a company to Trading Standards if, for example: 

  • they mislead you into buying their products or services
  • they sold you unsafe or dangerous items
  • they didn’t carry out the work properly, for example, their work left your home in a dangerous state
  • they sold you fake or counterfeit items
  • they pressured you to buy something you didn’t want to buy
  • they sold you a car that wasn't 'roadworthy' (it would cause danger if it was on the road)
How to report a trader: 

Call the Citizens Advice consumer helpline and tell them you want to report a trader to Trading Standards. The consumer helpline will assess your problem and pass it on to Trading Standards if it's appropriate. 

What trading standards do? 

Trading Standards will decide whether to investigate your problem. If they do, they might contact you for more information and evidence. Depending on what they find out, they might take action to stop the trader from acting unfairly. For example they might educate the trader about the law or take legal action against them to stop them from trading completely. Even if Trading Standards don’t contact you, they might use your evidence to take action in the future. 

]]> 2017-11-01 09:26:45 UTC https://padlet.com/emily_garoghan/legislation/wish/202417415 emily_garoghan https://padlet.com/emily_garoghan/legislation/wish/202417597 It is now accepted that a website becomes tangible
once it is coded and saved on to storage media,
especially if the source code is also printed. Websites
are therefore protected by copyright.]]> 2017-11-01 09:27:38 UTC https://padlet.com/emily_garoghan/legislation/wish/202417597 https://padlet.com/emily_garoghan/legislation/wish/202418094 The Act does not give people access to their own personal data (information about themselves) such as their health records or credit reference file. If a member of the public wants to see information that a public authority holds about them, they should make a subject access request under the Data Protection Act 1998.

]]> 2017-11-01 09:30:17 UTC https://padlet.com/emily_garoghan/legislation/wish/202418094 emily_garoghan https://padlet.com/emily_garoghan/legislation/wish/202422968 The Electronic Commerce Regulations (2002)
specified several rights to ensure fair trading through
e-commerce sites, including:
• the business should provide information about itself
such as its name, its geographic location and a
method of contact
• communications cannot be sent unless the sender is
easily identifiable and that any offer or promotion is
unambiguous
• when an order is placed, the business must
acknowledge the receipt of the order by electronic
means without delay
• allowing a customer to correct misplaced orders,
such as typing in 100 instead of 10.]]> 2017-11-01 09:59:41 UTC https://padlet.com/emily_garoghan/legislation/wish/202422968