Community resourceWorksheet

OCR H446 1.5.1 Computer misuse and copyright boundaries

Part 2 of 5 · H446 1.5.1 · Computing related legislation

Two laws, two different questions: OCR H446 1.5.1 expects students to test authorisation to access a system separately from permission to copy protected work. This worksheet teaches selection from the facts of a case, so that neither 'hacking' nor 'copyright' is used as a loose moral label.

Students will:

  • decide which law an action engages from the access or copying fact that describes it
  • apply both laws to one scenario in which each covers a different action
  • explain how written authorisation or a licence changes the legal analysis
  • correct claims that treat being able to open a file as permission to use it
  • analyse a case in which an authorised user goes beyond what they may do

Inside: 5 explanation cells, 1 multiple-choice question, 2 fill-in-the-blanks cells and 4 written answers. 30 marks, about 45 to 60 minutes.

Series: H446 1.5.1 · Computing related legislation, part 2 of 5.

Shared by Coding PathwayVerified teacher

  • 12 cells
  • About 45 minutes
  • CC BY-SA 4.0
  • Shared 31 Aug 2026
  • Updated 3 Sept 2026

Preview

The whole resource, exactly as a class sees it. Answers and marking are held back.

Computer misuse and copyright boundaries

Both laws concern digital activity, but they answer different questions. The Computer Misuse Act tests authorisation to access or interfere with systems/data. The Copyright, Designs and Patents Act tests rights and permission to copy, distribute or use protected work.

Choose from the action

Authorisation and permission choose different lawstest the action, not the word “computer”what did the person do?identify permission or authorisationUNAUTHORISED ACCESS?access, further offence, or damageComputer Misuse Act 1990authorisation has a scopeCOPY / DISTRIBUTE?protected work without permission/licenceCopyright, Designs andPatents Act 1988attribution is not permissionOne scenario may engage both laws, but each needs its own factual trigger.

The Computer Misuse Act 1990 prohibits unauthorised access, unauthorised access with intent to commit/facilitate further offences, and unauthorised acts that impair systems or data. Tools intended for computer-misuse offences may also be covered. H446 needs the purpose and prohibited actions, not changing penalty tariffs.

The Copyright, Designs and Patents Act 1988 gives creators/rights holders control over protected work. Copyright normally arises automatically. Another person generally needs permission, a licence or applicable reuse terms; attribution alone does not grant use.

Worked boundary: school media archive

Sam guesses a former employee's password, enters a restricted archive and downloads an original animation. Sam credits the animator and uploads the animation to a paid course.

  • guessed password + restricted archive → unauthorised access → Computer Misuse Act trigger;
  • copying/uploading protected animation for a paid course without permission → copyright trigger;
  • credit may avoid pretending to be the creator, but it does not supply the missing permission.

One event can engage both laws for different actions.

Multiple choice1 mark

Which change most directly repairs the copyright problem?

  • AAdd the animator's name in larger text
  • BObtain permission or a suitable licence from the rights holder before using the animation
  • CUse a faster download connection
  • DChange the archive password after copying
Fill in the blanks3 marks
Unauthorised system gap 1 points toward the Computer Misuse Act. Copying protected work without gap 2 points toward the Copyright, Designs and Patents Act. Naming the creator is gap 3, not a licence.
  • access
  • permission
  • attribution
  • encryption
Written answer6 marks

A security trainee is authorised to test one demonstration server. They deliberately scan a different live server and copy a commercial training video into the final report. Explain how each law may apply.

Treat the server access and copied video as separate factual triggers. Do not assume the authorised demonstration test covers the live server.

Students type their answer here.

Written answer4 marks

The live-server owner had given written authorisation for the exact scan, and the video was supplied under a licence allowing inclusion in reports. Explain how these facts change the legal analysis.

A changed permission fact should change the conclusion; do not defend the original answer automatically.

Students type their answer here.

Apply the model independently

The next tasks change the data, representation or context and reduce the support. Complete them using the method you have just learned, then check the required state or consequence.

Written answer8 marks

An employee is allowed to view customer invoices but exports the whole database to damage the employer's service. The export includes licensed photographs that the employee then sells separately. Analyse the possible Computer Misuse Act and copyright issues.

Permission to view does not automatically authorise every later action. Apply each law only to its own facts.

Students type their answer here.

Written answer4 marks

Correct both claims: (a) ‘If I can open a file, anything I do to it is authorised’; (b) ‘If I credit the creator, I can use the work commercially.’

Replace each absolute claim with the relevant permission boundary.

Students type their answer here.

Fill in the blanks4 marks
Computer misuse asks whether access or an act was checkpoint gap 1. Copyright asks whether copying or distribution had checkpoint gap 2. A single scenario may engage checkpoint gap 3 laws for distinct checkpoint gap 4.

Return here if a response uses ‘hacking’ or ‘copyright’ as a loose moral label rather than a legal action test.