I am studying towards a qualification called CREST CPSA, reading through their syllabus guide here. It covers some sections on Law that I was hoping to clarify on here.
On PDF page 6/20
it covers the following:
Knowledge of pertinent UK legal issues:
• Computer Misuse Act 1990
• Human Rights Act 1998
• Data Protection Act 1998
• Police and Justice Act 2006
Impact of this legislation on penetration testing
activities.
Awareness of sector-specific regulatory issues.
I had not previously heard of the Police and Justice Act 2006, and after doing some digging online I could not understand the difference between that and the Computer Misuse Act 1990.
They both seem to cover computer crimes, albeit one has a slightly lower maximum sentence...