Discuss the Ethical and Legal Issues of Information Security

Before tackling the digital aspect of data storage it is essential to discuss the basic legal principles outside of digital constraints. The main statute for this is the Data Protection Act (DPA) of 1988.
There are essentially 8 basic principles, which stipulate how information described as personal should be managed. This essay will only observe those principles referred to in the question.
The first of which is security for which the Act dictates that all personal data must be kept under tight controls and protected from unauthorized access. As such technical measures such as password encryption and backup contingencies are strongly advised. Furthermore, adopting security policies and restricting staff access to sensitive data is a DPA pre-requisite.
The DPA also tackles the issue of privacy referring to the handling of 'sensitive' or 'personal' data. This relates to the context of the employee/employer relationship. Thus the data controller (i.e. employer) has to take particular care when handling personal data to ensure it does not discriminate on the grounds of race, gender, age or disability. …