COM31051 | Background: Allocation of COTAX and CT Online user roles: system security legislation

The following information gives a brief explanation of what the legislation relevant to this subject contains.

Data Protection Act 1998

• the Data Protection Act 1998 covers personal information held in all forms ranging from data within IT systems to information in paper files. The Act also requires the fair and lawful processing of personal data

• the Act incorporates data protection principles that govern the way we in the Department maintain our records

• turther details can be found on the Security and Information Directorate intranet site

Computer Misuse Act 1990

• the Computer Misuse Act 1990 makes it a criminal offence to exceed, or attempt to exceed, your authorised use of a computer and the data contained in it