← GCSE Computer Science · AQA · GCSE Computer Science revision
⭐ 0
AQA GCSE Computer Science (8525) · 3.8 Ethical, legal and environmental impacts
Mini-Lesson

Ethical, legal and environmental impacts

3 missions. Guess, learn, then check. Your place is saved.

  1. Mission 1Logging in with a friend's password just to look: is it a crime?
  2. Mission 2A free app knows where you were all week. Who agreed to that?
  3. Mission 3Your old phone is in a drawer. Why does that matter to the planet?
Mission 1

Logging in with a friend's password just to look: is it a crime?

Make a guess: Logging in with a friend's password just to look: is it a crime?

Impacts · computer law

The Computer Misuse Act 1990

Computer Misuse Act offencesUnauthorisedaccess…with intent tocommit afurther crimeUnauthorisedacts with intentto impairsomeone else’spasswordHigher step = more serious offence
  • The Computer Misuse Act 1990 (CMA) makes hacking a crime in the UK. Unauthorised means without the owner's permission.
OffenceExample
Unauthorised access to computer materialLogging in with someone else's password, even just to look
Unauthorised access with intent to commit a further crimeLogging in to someone's bank account to steal money
Unauthorised acts with intent to impair a computer or its data (or reckless about it)Planting malware, deleting files, a denial of service attack
  • Context: you won't be asked to name this law. Know the principle: accessing a computer system without permission is illegal.
Quick check
?Sam uses a stolen password to log in to a shop account and orders goods charged to the owner's card. Which offence fits best?
Impacts · computer law

Laws that protect personal data

Data protection principlesNameHome addresshealthdata subjectpersonal dataOrganisation(data controller)Lawful & fairPurposeMinimumAccurateNot kept toolongSecureAccountableUK: Data Protection Act 2018 and UK GDPR
  • Personal data is any information that identifies a living person: name, address, photo, location, health records.
  • In the UK, the Data Protection Act 2018 (DPA) and the UK GDPR control how organisations collect, store and use it. Organisations must follow seven principles:
PrincipleIn plain words
Lawfulness, fairness and transparencyHave a legal reason; tell people what you collect and why
Purpose limitationUse it only for the reason you gave
Data minimisationCollect only what you need
AccuracyKeep it correct and up to date
Storage limitationDon't keep it longer than needed
Integrity and confidentiality (security)Protect it from loss, theft and hacking
AccountabilityBe able to show you follow the rules
  • Context: you won't need the law's name or this list. Know that organisations must, by law, keep personal data secure and use it fairly.
Impacts · computer law

Your rights over your data

  • The person the data is about is the data subject. The organisation deciding how it is used is the data controller.
You have the right to…Example
Be told what is held and whyA privacy notice when you sign up
Get a copy (subject access request)Usually free, answered within one month
Have it correctedFix a wrong address
Have it deleted, in some casesClose an old account
Object to direct marketingStop sales emails
  • Serious data breaches must be reported to the Information Commissioner's Office (ICO) within 72 hours of finding out.
Quick check
?A gym keeps the bank details and photos of members who left eight years ago, "in case they rejoin". Which principle is it breaking?
Mission check

?You log in with a friend's password just to look, and change nothing. Is it a crime?
Mission 2

A free app knows where you were all week. Who agreed to that?

Make a guess: A free app knows where you were all week. Who agreed to that?

Impacts · ethics and privacy

Personal data and privacy

Where your data goesPhoneLocationContactsPhotosBrowsingHealthCompanyserversAdvertisers
  • Personal data identifies you: name, photos, location, browsing history, smartwatch health data.
  • Privacy is your right to control who sees information about you.
  • Apps collect it through permissions and by tracking what you do.
  • Data is valuable for targeting adverts or selling on. "Free" apps are often paid for with your data.
Impacts · ethics and privacy

Consent and misuse

  • Consent means agreeing to your data being collected and used. Fair consent is informed, freely given and easy to withdraw.
  • Tapping "Allow" or accepting the terms is usually treated as consent, read or not.
  • Misuse: using data in ways people didn't agree to, such as selling or leaking it.
Quick check
?A fitness app shares users' heart-rate data with a health insurer, which then raises some users' prices. The app's terms never mentioned this. What is the main issue?
Impacts · ethics and privacy

Issues across new technologies

Benefits and issuesMobile phones+Maps, contact, payments anywhere!Constant location tracking; hard toswitch offWearables and implants+Monitor health; pacemakers keep peoplealive!Sensitive health data could be hacked,shared or soldCloud storage+Files anywhere, automatic backup!Another company holds your data,possibly under another country’s lawsWireless networks+Easy connection!Data sent on open, password-freenetworks can be intercepted; unsecurednetworks invite hackingAutonomous vehicles+May cut crashes caused by human error!Who is responsible when one crashes:owner, maker or programmer?
TechnologyBenefitEthical, legal or privacy issue
Mobile phonesMaps, contact, payments anywhereConstant location tracking; hard to switch off
Wearables and implantsMonitor health; pacemakers keep people aliveSensitive health data could be hacked, shared or sold
Cloud storageFiles anywhere, automatic backupAnother company holds your data, possibly under another country's laws
Wireless networksEasy connectionData sent on open, password-free networks can be intercepted; unsecured networks invite hacking
Autonomous vehiclesMay cut crashes caused by human errorWho is responsible when one crashes: owner, maker or programmer?
  • Most technologies bring benefits and risks; exam answers should weigh both.
Quick check
?A self-driving car's software must choose between braking hard, risking its passengers, or swerving, risking a pedestrian. Which issue does this raise most directly?
Impacts · ethics and privacy

Privacy or security?

  • Citizens normally value privacy and may dislike governments or security services having too much access.
  • Governments and security services argue they cannot keep citizens safe from terrorism without access to private data, such as messages.
  • Police reading encrypted messages may catch criminals, but risks mass surveillance.
  • Cyber security: organisations must protect the data they hold; one breach can expose millions.
  • Hacking (unauthorised access to a computer system) is illegal.
Mission check

?A free app knows where you were all week. Who agreed to that?
Mission 3

Your old phone is in a drawer. Why does that matter to the planet?

Make a guess: Your old phone is in a drawer. Why does that matter to the planet?

Impacts · environment

The life of a device

The life of a devicenewdeviceManufactureUseReplacementcycleDisposal
  • Every device goes through four stages, and each affects the environment.
StageEnvironmental impact
ManufactureMining gold, copper and cobalt uses energy and water, damages land, can involve unsafe work
UseDevices, networks and data centres need electricity
Replacement cycleFrequent upgrades (new features, slow software, worn batteries) mean making more devices
DisposalOld devices become e-waste
  • Much of the impact happens before you even switch a device on.
Impacts · environment

Energy consumption

  • Devices, routers and servers use electricity, much of it still generated from fossil fuels, releasing carbon dioxide.
  • Data centres run nonstop and need cooling. In 2024 they used about 1.5% of the world's electricity (415 TWh), expected to more than double by 2030, partly due to AI.
  • To cut it: efficient processors, sleep modes, renewable energy, cool-climate data centres, switching off instead of standby.
Calculate
?In 2022 the world produced 62 million tonnes of e-waste. Only 22.3% was documented as properly collected and recycled. How many million tonnes is that? Give your answer to 1 decimal place.
million tonnes
Impacts · environment

E-waste and disposal

Where e-waste goes62 million tonnes of e-waste (2022)22.3%77.7%documented as recycled(13.8 Mt)not documentedlandfillshipped abroadrecyclingSource: UN Global E-waste Monitor 2024.
  • E-waste is thrown-away electrical and electronic equipment. It is growing faster than recycling.
  • In landfill, toxic substances such as mercury and lead can leak into soil and water.
  • Some is shipped to poorer countries and burned or stripped by hand, harming workers' health.
  • Recycling recovers metals: 2022's e-waste held about US$91 billion worth.
  • Best first: keep using, repair, reuse, then recycle.
Quick check
?A school replaces all 300 of its laptops every two years. Which change would cut its environmental impact most?
Impacts · environment

Technology can also help

  • Smart meters and smart heating show energy use and cut waste.
  • Video calls and remote working reduce travel.
  • Sensors and satellites monitor pollution, deforestation and ice loss; computer models forecast weather and climate change.
  • Online documents and e-tickets save paper, although the servers behind them still use energy.
  • In an exam answer, weigh the harms against these benefits.
Mission check

?Your old phone is in a drawer. Why does that matter to the planet?
Recap

Big ideas

  • Getting into a computer system without permission is a crime, even with no damage; adding intent to commit another crime or to impair the system makes it more serious. (UK: Computer Misuse Act 1990; names are context for AQA)
  • Organisations must collect only the personal data they need, keep it accurate and secure, use it only for the stated purpose and delete it when no longer needed; people can see and correct their data.
  • Personal data has value; collecting and using it fairly needs informed consent, and using it for anything else is misuse.
  • New technologies bring benefits and risks: weigh both, including privacy, safety and who is responsible.
  • Privacy and security pull in different directions: citizens value privacy, while governments argue they need access to private data to keep people safe.
  • Devices harm the environment at every stage: manufacture, use (energy), the replacement cycle and disposal.
  • E-waste is growing faster than recycling; keeping devices longer, repairing and recycling all help.
  • Technology also helps the environment, so good answers weigh benefits against harms.
🏆

Mini-lesson complete!

⭐⭐⭐

You've worked through Ethical, legal and environmental impacts for AQA GCSE Computer Science (8525). 🎉

  1. Mission 1Logging in with a friend's password just to look: is it a crime?
  2. Mission 2A free app knows where you were all week. Who agreed to that?
  3. Mission 3Your old phone is in a drawer. Why does that matter to the planet?

Your stars: 0 / 0

Next: test yourself in the Verify stage.

📣 Smashed it? Share your score

Challenge a mate to beat your stars, or show a parent how you got on.

→ Back to GCSE Computer Science · AQA

Specification points and sources for this lesson are listed at the bottom of the page.

Sources (20)

The specification points and sources behind this lesson.

  1. 1 AQA 8525 spec v1.3, 3.8
  2. 2 Computer Misuse Act 1990, ss.1, 2, 3, 3ZA, 3A, legislation.gov.uk: https://www.legislation.gov.uk/ukpga/1990/18/crossheading/computer-misuse-offences
  3. 3 ICO, A guide to the data protection principles: https://ico.org.uk/for-organisations/uk-gdpr-guidance-and-resources/data-protection-principles/a-guide-to-the-data-protection-principles/
  4. 4 ICO, A guide to subject access: https://ico.org.uk/for-organisations/uk-gdpr-guidance-and-resources/subject-access-requests/a-guide-to-subject-access/ (summary via LexisNexis news 17/07/2026)
  5. 5 ICO, Responding to a cyber security incident: https://cy.ico.org.uk/media2/migrated/2614816/responding-to-a-cybersecurity-incident.pdf
  6. 6 NI Business Info, UK GDPR penalties and fines: https://www.nibusinessinfo.co.uk/content/gdpr-penalties-and-fines
  7. 7 CPS, Data Protection Act 2018 criminal offences: https://cps.gov.uk/node/5664
  8. 8 RIPA 2000 s.53, legislation.gov.uk: https://www.legislation.gov.uk/ukpga/2000/23/section/53/data.html
  9. 9 SI 2000/2699, legislation.gov.uk: https://www.legislation.gov.uk/uksi/2000/2699/made ; SI 2018/356: https://www.legislation.gov.uk/uksi/2018/356/data.html
  10. 10 ICO, Overview of the FOI Act 2000: https://cy.ico.org.uk/media/about-the-ico/documents/1042173/overview_of_the_foi_act_2000_and_regulatory_framework.pdf
  11. 11 FOI Act 2000 s.77, legislation.gov.uk: https://www.legislation.gov.uk/ukpga/2000/36/section/77/data.htm
  12. 12 SI 2018/652 and SI 2018/940 explanatory notes, legislation.gov.uk: https://www.legislation.gov.uk/uksi/2018/652/note ; https://www.legislation.gov.uk/uksi/2018/940/note/made/data.html ; NPSA/Dentons guide: https://www.npsa.gov.uk/system/files/documents/npsa_dentons_uk.pdf
  13. 13 The Record, 21 May 2026: https://therecord.media/uk-plans-for-cybercrime-law-reform-limited-protections
  14. 14 Computer Misuse Act 1990, contents and changes status, legislation.gov.uk: https://www.legislation.gov.uk/ukpga/1990/18/contents
  15. 15 UK Parliament, Crime and Policing Bill amendment 361 (Lord Holmes): https://bills.parliament.uk/bills/3938/stages/20237/amendments/10027754
  16. 16 SI 2000/2699 reg. 3, legislation.gov.uk: https://www.legislation.gov.uk/uksi/2000/2699/regulation/3/made ; SI 2018/940 reg. 3(h): https://www.legislation.gov.uk/uksi/2018/940/regulation/3/made
  17. 17 BCS, The Chartered Institute for IT, Code of Conduct: https://www.bcs.org/membership-and-registrations/become-a-member/bcs-code-of-conduct/
  18. 18 WEEE Forum, "International E-waste Day: Of ~16 Billion Mobile Phones Possessed Worldwide, ~5.3 Billion will Become Waste in 2022" (13 Oct 2022): https://weee-forum.org/ws_news/of-16-billion-mobile-phones-possessed-worldwide-5-3-billion-will-become-waste-in-2022/
  19. 19 UNITAR, Global E-waste Monitor 2024 press release: https://www.unitar.org/about/news-stories/press/global-e-waste-monitor-2024-electronic-waste-rising-five-times-faster-documented-e-waste-recycling
  20. 20 IEA, Energy and AI, executive summary: https://www.iea.org/reports/energy-and-ai/executive-summary