MAINSYSTEMS 
1. Core Concepts and Legal Context
Today we will learn to recognise limits on using organisational assets, access and information. Throughout the video, consider the difference between knowing a rule and applying it to a decision. We will work through an example, identify a possible failure and develop a response that can be used at work. A code of conduct translates principles into guidance for workplace decisions. Present this course alongside the code actually adopted by the entity. Examples help interpret situations without creating internal rules that the organisation has not approved.
Resources include equipment, time, funds, access and information. Use must respect professional purposes and internal rules. Technical access does not authorise every use. Work information may be confidential or personal. Convenience, curiosity and a friend's informal request do not justify consulting or sharing data.
Apply the following rule: Retention must meet necessity and proportionality principles, GDPR requirements and procedural needs. The Act does not generally authorise indefinite retention of all attachments. Set reviews and document disputes that justify retention.
2. Practical Application and National Rule
Before using a resource, check purpose and authority. Before sharing, verify recipient and need. Use approved methods and avoid personal accounts where procedures prohibit them. Report mistakes promptly through the proper route. Contain the problem and preserve records rather than conceal it. Before moving on, turn this procedure into a sequence you could explain to a colleague. Identify the first check, the action that depends on its outcome and the record that allows the decision to be reconstructed. Follow the sequence on screen and identify the point where an error would change the result.
An employee accesses tender information to help a friend bid. The system permits access, but the purpose falls outside their duties and may compromise equality and confidentiality. Technical permission does not legitimise use. Now read the case carefully. Separate established facts from information you would still need to confirm. Do not add motives or events that have not been described. This distinction matters when choosing a response proportionate to the information available.
3. Case Study and Key Decision Points
The exercise is as follows: If the system allows a document to be opened, may it be used for any purpose? Choose an answer and write one sentence explaining it. During the pause, compare your choice with the criteria we have just considered. Also think about the material you would retain to explain the decision later.
No. Authority depends on role and purpose. Technical permissions are an operational boundary, not unlimited permission. The code and procedures guide legitimate information use.
One mistake to avoid is: confusing technical capability with functional authorisation.
Now apply the national rule to a second decision. The system deletes every case five years after receipt, regardless of the country and any pending proceedings. Is that appropriate?
No. Identify the local rule, starting event and any limits or extensions. A uniform schedule may delete records too early or retain them too long. Document the decision by category, include copies and define who reviews a suspension of deletion, rather than keeping everything indefinitely.
Remember these three points. First: Confirm the purpose. Second: Respect authorisations. Third: Report errors through the proper route.
To apply this learning, retrieve the procedure used in your organisation or consider how you would create it. Identify one difference between that procedure and the case we have just resolved. Write down the change you would propose and the information needed to justify it. You can complete this short task in the handout accompanying the video.
The expected outcome of this unit is the ability to recognise limits on using organisational assets, access and information. Review the explained answer whenever you are unsure and keep the summary to support a future decision.
In the worksheet, connect your proposal to this video's national rule. Identify the document or platform field that would need to change and who should approve the change. If you conclude that it is good practice, explain the risk you intend to reduce. If you conclude that there is a legal duty, record its source and scope.