I am studying towards a qualification called CREST CPSA, reading through their syllabus guide here. It covers some sections on Law that I was hoping to clarify on here.
On PDF page
6/20 it covers the following:
Knowledge of pertinent UK legal issues: • Computer Misuse Act 1990 • Human Rights Act 1998 • Data Protection Act 1998 • Police and Justice Act 2006 Impact of this legislation on penetration testing activities. Awareness of sector-specific regulatory issues.
I had not previously heard of the Police and Justice Act 2006, and after doing some digging online I could not understand the difference between that and the Computer Misuse Act 1990.
They both seem to cover computer crimes, albeit one has a slightly lower maximum sentence...