Sales and Service Manager reports to the Support Director and this
department is responsible for all sales and customer service functions
including the maintenance of the customer database.
This job relates
to the following legislations.
“The Data Protection Act controls how your
personal information is used by organisations, businesses or the government.”
If an organisation wants to store personal data it should notify the Office of
the Information Commissioner about they want to store personal data. Organisations must
appoint a data controller who has to register & is responsible for the
management of personal data. Infringements to data protection act can occur
through passing on data to third parties,sending data to the wrong person,
failing to encrypt sensitive information and misplace records and not disposing
them correctly. There are penalties when the data protection act is breached.
Penalties like fines up to £500,000, prison sentences, prosecutions and
enforcement notices.
It refers to personal
data that would be stored electronically or on paper. There are 8 rules which need to be followed
which are called data protection principles.
used fairly and
lawfully
used
for limited, specifically stated purposes
used
in a way that is adequate, relevant and not excessive
accurate
kept
for no longer than is absolutely necessary
handled
according to people’s data protection rights
kept
safe and secure
not
transferred outside the European
Economic Area without
adequate protection
Sales and service
manager deals with the maintenance of
the customer database which has personal data held about customers so this law
protects customers private information.
https://www.gov.uk/data-protection
Computer misuse act 1990 was created to protect users
from attacks and have information stolen. This act is split into 3
separate offences. The legislation makes it an offence to have unauthorised
access to computer material, unauthorised access with
intent to commit or facilitate commission of further offences, unauthorised
modification of computer materials. “The act also covers unauthorised access
to different parts of a computer system, therefore, a person may be allowed to
access one part of a system but not others, and the accessing of the other
parts will be an offence.” This act is
relevant to this job because the person with this job will have access to all
of the customers private information and is trusted to handle data professionally.
Breaching this act will have consequences such as 6 months imprisonment or a
fine of up to £5000 or maximum fine on summary conviction or 5 years
or fine on indictment.
https://www.sqa.org.uk/e-learning/ITLaw01CD/page_03.htm
