⚖️ Is This Legal? Is This Ethical?

What is it?

A UK law that makes it illegal to access someone else's computer or network without permission. Think of it like digital trespassing.

When was it made?

1990 — back when the internet was new and lawmakers realised we needed rules for the digital world.

Key rules:

• Section 1: Unauthorised access to computer material (basic hacking — up to 2 years prison). Even just "looking" at files you shouldn't see is illegal. Example: Guessing someone's Instagram password and logging in.
• Section 2: Unauthorised access with intent to commit further offences (hacking to steal — up to 5 years). This is when you break in to commit other crimes. Example: Hacking someone's PayPal to steal their money.
• Section 3: Unauthorised acts with intent to impair operation of a computer (DDoS, malware — up to 10 years). Deliberately breaking or damaging computer systems. Example: Creating viruses or launching DDoS attacks on websites.
• Section 3ZA: Unauthorised acts causing serious damage (e.g. attacking critical infrastructure like hospitals, power grids — up to life imprisonment). Added by the Serious Crime Act 2015. Example: Hacking a hospital's systems and causing patient harm, or attacking power grids.
• Section 3A: Making, supplying or obtaining articles for use in offences (creating/distributing hacking tools — up to 2 years). Even just making hacking tools is illegal. Example: Creating keylogger software and sharing it online.

Real examples that teenagers might not realise are illegal:

• Using your friend's Netflix account without their permission
• Looking at files on a school computer you shouldn't access
• Creating a "harmless" virus just to see if you can
• Installing keylogger software to capture someone's passwords
• Joining a DDoS attack on a gaming server "for the lulz"

What happens if you break it?

The penalties range from 2 years for basic hacking up to life imprisonment for attacking critical infrastructure. Most cases result in fines and shorter prison sentences, but the law is taken very seriously.

📜 Read the full law: Computer Misuse Act 1990 on legislation.gov.uk

What is it?

GDPR (General Data Protection Regulation) controls how companies collect and use your personal information. In the UK, we also have the Data Protection Act 2018 which works alongside GDPR.

When was it made?

GDPR came into force in May 2018 across Europe. The UK kept these rules after Brexit because protecting personal data is important.

Key rules:

• Be transparent: Tell people what data you're collecting and why
• Get consent: Ask permission before collecting personal data
• Keep it secure: Protect data from hackers and breaches
• Don't keep it forever: Delete data when you don't need it anymore
• Right to be forgotten: People can ask for their data to be deleted

Real examples:

• Instagram asking for your birthday when you sign up
• Websites showing cookie notices
• Getting emails asking you to confirm your newsletter subscription
• Being able to download all your Facebook data

What happens if companies break it?

Huge fines — up to £17.5 million or 4% of the company's global revenue (whichever is higher). Amazon was fined £634 million for GDPR violations!

📜 Read the full law: UK GDPR on legislation.gov.uk
📜 Read the full law: Data Protection Act 2018 on legislation.gov.uk

What is it?

Copyright protects creative work like music, films, books, software, and images. It gives the creator exclusive rights to copy, share, or change their work.

When was it made?

The main UK law is the Copyright, Designs and Patents Act 1988, but copyright has existed for centuries. It automatically applies when you create something original.

Key rules:

• Automatic protection: Copyright happens the moment you create something
• Creator owns it: The person who made it controls how it's used
• Can't copy without permission: Downloading, sharing, or editing needs consent
• Fair dealing exceptions: Some uses are OK (education, criticism, parody)
• Expires eventually: Usually 70 years after the creator dies

Real examples:

• Downloading films from illegal torrent sites
• Using someone's photo from Instagram without asking
• Playing copyrighted music in your YouTube video
• Copying code from GitHub (unless it has an open license)

What happens if you break it?

Copyright holders can sue for damages, and courts can order you to stop. In serious cases (like running a piracy site), you could face criminal charges and prison.

📜 Read the full law: Copyright, Designs and Patents Act 1988 on legislation.gov.uk

What is it?

Ethics is about doing the right thing, even when no law tells you what to do. In computing, we make decisions that affect millions of people, so we need to think carefully about the consequences.

Why does it matter?

Technology is powerful. Algorithms decide who gets jobs, loans, and even prison sentences. AI can spread bias and misinformation. We need to build tech that helps everyone, not just a few.

Key ethical principles:

• Fairness: Technology should treat everyone equally
• Privacy: Respect people's right to keep things private
• Transparency: Be honest about how technology works
• Accountability: Take responsibility for what you create
• Beneficence: Use technology to help, not harm

Real examples of ethical dilemmas:

• Should AI hiring software be allowed if it's biased against women?
• Is it OK for social media to show you content designed to be addictive?
• Should self-driving cars prioritise passengers or pedestrians in a crash?
• Is it ethical to use facial recognition to track people in public?

What happens if we ignore ethics?

While there's no "ethics police," ignoring ethics leads to real harm: discrimination, privacy violations, addiction, and loss of trust. Good ethical practices help create technology that genuinely improves lives.