In a SaaS platform, should users be allowed to change other users profile information (things like Name, Gender, Company they work for etc)?

What laws (US & EU) would give guidance either way? Where can resources be found on topics like this before consulting with a lawyer?

Should active consent be granted to do so if even considered?

  • Changing someone else's information implies that they had access to that information, and that is definitely a breach of GDPR. – GeoffAtkins Dec 11 '19 at 17:38
  • 1
    GDPR: For what purpose do users access and modify other user's personal data? Once you have a clear purpose, you can think about which legal basis could cover this purpose. Consent is just one legal basis among many. – amon Dec 11 '19 at 18:32

Your Answer

By clicking “Post Your Answer”, you agree to our terms of service, privacy policy and cookie policy

Browse other questions tagged or ask your own question.