Issues & Impact

What it does: Protects personal data — organisations must keep data secure, accurate, and only use it for the stated purpose. Individuals have the right to see their data, have it corrected, or deleted.

What it does: Makes it illegal to (1) access a computer without authorisation, (2) access a computer to commit further crime, (3) modify data without authorisation (e.g., installing malware, deleting files).

What it does: Protects the creators of original works (music, software, books, art) from having their work copied without permission.

Amazon’s AI recruitment tool (2018) was found to discriminate against women because it was trained on 10 years of CVs — mostly from men. This shows technology can amplify existing biases.

China’s social credit system monitors citizens’ behaviour and assigns scores that affect their access to services.

Self-checkout machines replace cashiers. Self-driving cars threaten taxi/lorry drivers. But new tech jobs are created (data scientists, AI engineers).

Algorithms show content designed to keep you scrolling (engagement-maximising). This can create filter bubbles and spread misinformation. Facebook’s own research showed Instagram harms teenage mental health.

• E-waste: Only 17% of electronic waste is properly recycled globally. The rest goes to landfill, leaking toxic metals (lead, mercury, cadmium) into soil and water.
• Energy use: Data centres (where cloud services run) consume about 1–2% of global electricity. A single Google search uses about 0.3 Wh of energy. Training a large AI model can emit as much CO₂ as five cars over their lifetimes.
• Positive impacts: Video conferencing reduces travel (fewer flights/car journeys). Smart energy systems optimise electricity use. Digital documents reduce paper waste.
• Planned obsolescence: Some argue manufacturers deliberately make devices that become slow or unsupported after a few years, forcing upgrades and creating more waste.

What it is: The gap between people who have access to technology and those who don’t.

Causes: Cost of devices/broadband, rural areas with poor connectivity, age (elderly less likely to use tech), disability (not all websites are accessible).

The DPA 2018 incorporates GDPR into UK law. Organisations that collect personal data must follow these 6 principles:

1. Lawfulness, fairness and transparency — data must be processed legally and openly.
2. Purpose limitation — data can only be collected for a specific, stated purpose.
3. Data minimisation — only the data that is necessary should be collected.
4. Accuracy — personal data must be kept accurate and up to date.
5. Storage limitation — data should not be kept for longer than needed.
6. Security — data must be protected against unauthorised access, loss or damage.

The CMA defines three levels of offence:

1. Unauthorised access to computer material — e.g., accessing someone else’s account without permission. Even if no damage is done, this is still an offence.
2. Unauthorised access with intent to commit a further offence — e.g., hacking into a bank’s system to steal money or commit fraud.
3. Unauthorised modification of computer material — e.g., creating and distributing malware/viruses, deleting or altering files without permission.

This law protects the intellectual property of creators. It covers:

• Software code, music, films, images, text and other creative works
• It is illegal to copy, distribute, or modify copyrighted work without the owner’s permission
• Penalties include fines and imprisonment

Creative Commons is an alternative licensing system that allows creators to share work with specific permissions (e.g., allow non-commercial use, require attribution).