Computing · Year 11

Active learning ideas

Legislation and Data Protection

Active learning helps students grasp the practical implications of legislation and data protection by turning abstract rules into real-world scenarios. When students role-play or investigate real cases, they see how laws affect behavior and consequences, making the content more meaningful and memorable.

• National Curriculum Attainment Targets
• GCSE: Computing - Ethical, Legal and Cultural Impacts
• GCSE: Computing - Legislation

• 20–45 min
• Pairs → Whole Class
• 3 activities

Activity 01

• Mock Trial
• 45 min · Whole Class

Mock Trial: The Computer Misuse Case

Students act out a trial for a 'hacker' who accessed a school's grade system. Roles include the defendant, the prosecution (using the Computer Misuse Act), and the jury, who must decide if the actions were illegal based on the specific wording of the law.

How do privacy laws balance the needs of national security with individual rights?

Facilitation Tip

Before the mock trial, provide students with clear roles, key facts, and the relevant sections of the Computer Misuse Act so they can focus on legal arguments rather than script-writing.

What to look for

Pose the scenario: 'A popular online streaming service has experienced a data breach, exposing user names and viewing habits. What rights do the affected users have under the Data Protection Act? Who is legally responsible, and what penalties might they face?' Facilitate a class discussion to explore these questions.

• Analyze
• Evaluate
• Create
• Decision-Making
• Social Awareness

Activity 02

• Inquiry Circle
• 30 min · Small Groups

Inquiry Circle: GDPR Audit

Groups act as 'Data Protection Officers' for a fictional sports club. They must review the club's data practices and use the Data Protection Act to identify three 'illegal' practices and suggest how to fix them to protect member privacy.

What are the challenges of enforcing copyright law in a globalized digital economy?

Facilitation Tip

For the GDPR audit, give teams a specific organization to audit, a checklist of GDPR requirements, and access to sample policies so they practice checking compliance rather than creating policies from scratch.

What to look for

Present students with short case studies. For each, ask them to identify which piece of legislation (Data Protection Act, Computer Misuse Act, Copyright Designs and Patents Act) is most relevant and briefly explain why. For example, 'A student downloads a movie from an illegal website.' or 'A company accidentally sends a customer's personal details to the wrong email address.'

• Analyze
• Evaluate
• Create
• Self-Management
• Self-Awareness

Activity 03

• Think-Pair-Share
• 20 min · Pairs

Think-Pair-Share: Copyright in the AI Age

Students discuss who owns the copyright to an image created by an AI: the person who wrote the prompt, the company that made the AI, or the artists whose work the AI was trained on. They share their 'fair' solution with the class.

How would you rewrite data protection laws to account for emerging biometric technologies?

Facilitation Tip

In the think-pair-share on copyright and AI, start with a controversial statement to spark debate, then provide a short reading on Creative Commons licenses to ground their discussion in concrete examples.

What to look for

Ask students to write down one key difference between the responsibilities of a Data Controller and the rights of a Data Subject. Then, have them briefly explain one way the Computer Misuse Act protects individuals or organizations.

• Understand
• Apply
• Analyze
• Self-Awareness
• Relationship Skills

A few notes on teaching this unit

Teach this topic by linking each law to a relatable scenario so students see it as a tool for justice, not just a list of rules. Avoid overwhelming them with legal jargon. Instead, use guided practice to build familiarity with key terms in context. Research suggests that students retain legal concepts better when they apply them to dilemmas rather than memorize definitions.

Students will confidently explain key legislation, apply it to case studies, and justify their decisions using legal language. They will move from recognizing terms like 'data subject' to demonstrating how these concepts protect rights in technology use.

---

Watch Out for These Misconceptions

• During the Mock Trial: The Computer Misuse Case, watch for students who argue that the defendant is only guilty if they stole data. Redirect them to the prosecution’s opening statement, which emphasizes that unauthorized access itself violates Section 1 of the Computer Misuse Act.

  During the Mock Trial: The Computer Misuse Case, pause the trial after the prosecution presents its case. Ask students to identify which part of the Computer Misuse Act applies to the defendant’s actions, even if no data was taken. Have them rephrase the law in their own words to reinforce that access alone is the crime.

• During the Think-Pair-Share: Copyright in the AI Age, watch for students who claim that anything on the internet is free to use. Redirect them to the Creative Commons license examples you provide and ask them to compare rights under different licenses.

  During the Think-Pair-Share: Copyright in the AI Age, display two similar images found online. One has a Creative Commons license, the other is marked 'all rights reserved.' Ask students to discuss which one they can legally use in a school project and why, using the license details as evidence.

---

Methods used in this brief

• Mock Trial
• Inquiry Circle
• Think-Pair-Share