Why computers need laws, and where the rules come from
Law is a set of rules made by a country (and sometimes by groups of countries) that people must follow. When computers and the internet arrived, old problems moved online: copying other people's work, reading private information, breaking into places, and making deals. Many countries then wrote new laws or applied older ones to computers.
Laws are different in every country. For example, the EU has the General Data Protection Regulation (GDPR), the UK has the Computer Misuse Act (1990) and India has the Information Technology Act (2000) and the Digital Personal Data Protection Act (2023). We do not need to remember every section. We need the main ideas below. (This lesson teaches the ideas; it is not legal advice.)
Online, people from many countries use the same website. A company often has to follow the law of the country where its users live as well as its own.
Copyright and software licences
Copyright gives the creator of a work (a song, film, photo, book or computer program) the right to decide who may copy, share or change it. It starts automatically when the work is made. It lasts for many decades, often until 50 to 70 years after the creator's death, depending on the country.
Licences
A licence is the creator's permission with conditions. A shop licence for a program may let you use it on one device. Open licences allow more: Creative Commons licences let you share a work if you give credit (and follow any extra rule such as "not for sale"). Open-source licences let you read, use and change program code under stated rules.
What is not allowed
- Copying and sharing paid films, music or games without permission (piracy).
- Using someone's picture or text and saying it is yours (plagiarism; it may also break copyright).
- Removing the creator's name or using a program beyond its licence.
Most laws allow small fair use or "fair dealing", such as quoting a short piece for study with credit. The exact rules differ, so when unsure, ask for permission or use works with an open licence.
Privacy and data protection
Personal data is any information that can identify a person: name, address, phone number, photo, location, ID number, online account. Data protection or privacy laws give people control over it.
Main ideas
- Consent and purpose: a company should tell you what it collects and why, and use it only for that reason.
- Only what is needed: collect as little as possible and keep it only as long as needed.
- Your rights: in many countries you can see your data, correct it, and ask for it to be deleted.
- Security: the company must keep the data safe and, in many countries, tell people if there is a data breach.
- Special care for children: extra rules often apply to data about young people.
You also have duties: do not post other people's photos or private details without their agreement.
Computer misuse, and contracts online
Computer misuse
A computer and its data belong to someone. Laws make it a crime to:
- get into a computer or account without permission (unauthorised access, "hacking"), even if you only look and break nothing;
- change or delete data without permission, or spread malware (harmful programs such as viruses);
- use a computer to cheat or steal money (online fraud), for example phishing;
- block a service on purpose, for example by flooding it with traffic.
"Ethical hackers" who test security must have the owner's written permission first. See also Cyber crime and the IT Act.
Contracts and online shopping
A contract is an agreement that the law will enforce. It needs an offer (a shop shows a price), acceptance (you tap "Buy" or "I agree"), and usually something of value exchanged (money for goods). Electronic signatures and clicks are accepted in most countries. Terms and conditions are part of the contract, so read the main points before you tap. Many countries also give buyers consumer rights, such as a short period to cancel an online order.
Key formulas and definitions
- Copyright: automatic; lasts often 50 to 70 years after the creator's death (depends on the country)
- Contract = offer + acceptance + something of value (+ intention to be bound)
- Data protection: collect with consent, use for the stated purpose, keep safe, delete when no longer needed
- Four permissions: copy → licence; collect → consent; come in → permission; commit → agreement
- Key terms: copyright, licence, piracy, plagiarism, personal data, consent, data breach, unauthorised access, malware, contract
Worked examples
1. A student downloads a paid game from a free "crack" site and shares it in a class group. Which area of law? Is it allowed?
Copyright. The game has an owner and a licence that was not given for free copies. Copying and sharing it is piracy and is not allowed. The legal way is to buy it, use a free or open version, or ask the owner.
2. A shopping app asks for your contacts, location and photos, but it only needs your delivery address. What should you think about?
Privacy. A good app collects only what it needs for the stated purpose. You can refuse extra permissions in settings, and the law in many countries says the company must have a clear reason and your consent.
3. A friend leaves their phone unlocked. You open their messages "just to see". Is this a problem if you change nothing?
Computer misuse. Using someone's device or account without permission is unauthorised access. It does not matter that nothing was changed; permission was needed.
4. You tap "I agree" and pay for a game. Next day you change your mind. What does the law say?
Both sides agreed (offer, acceptance, payment), so a contract exists. Many countries give online buyers a short cancel-and-refund period under consumer law, but it depends on the country and the product, so check the seller's terms.
5. You want to use a photo from a website in your school project. How can you do it legally?
Look at the licence. If it is open (for example Creative Commons) and allows use with credit, you may use it, give the creator's name and follow other conditions. If there is no licence, ask for permission or use your own photo.
6. A company is hacked and customers' emails are stolen. What does data protection expect from the company?
It should have kept the data safe, and in many countries it must tell the affected people and the authority quickly. Customers may then change passwords and watch for phishing.
Common mistakes
- Thinking "If it is on the internet, it is free to copy." Most things online still have an owner.
- Thinking hacking is only illegal if you break something. Entering without permission is already the offence.
- Tapping "I agree" without reading. It can make a binding contract.
- Thinking the law is the same in every country. Check the rules of your country and of the website you use.