Questions tagged [data]
The data tag has no usage guidance.
60
questions
11
votes
3
answers
7k
views
Legality of Using Unofficial API
I have discovered a mobile app's backend API through reverse engineering. The public can access this API and it does not require specific authorization, however, it is not documented and it is not an ...
4
votes
1
answer
195
views
Does the Colorado Privacy Act apply to churches with memberships (ex: Jehovah’s Witnesses)?
Suppose a person living in Colorado is a registered member of a church. In this church, certain “blessings” are considered contingent on your membership. Membership is recorded on a digital system.
...
4
votes
1
answer
91
views
How does GDPR's right to erasure apply to deduplicated storage?
I am trying to understand GDPR's right to erasure (and principle of storage limitation) in the following case:
Company A offers a online data storage service that is intended to be used by the users ...
16
votes
1
answer
763
views
Is it illegal for a firm to train an AI model on a CC BY-SA 4.0 corpus and make a commercial use of it without distributing the model under CC BY-SA?
https://meta.stackexchange.com/q/388551/178179 mentions that SE will force some firms to pay to be allowed to train an AI model on the SE data dump (CC BY-SA licensed) and make a commercial use of it ...
1
vote
1
answer
93
views
How can you make a fresh new translation of the bible without running into copyright problems?
I have been looking for open source versions of the bible written in Hebrew, with annotations, such as the literal english meaning of each Hebrew term, the definition of each Hebrew term, the part of ...
0
votes
1
answer
30
views
Can two or more different entities simultaneously be data controllers for the same data?
Suppose Alice is a customer of a business ACME who holds data on her like email correspondence. ACME uses a third party to manage their email, suppose Fastmail.fm. Fastmail.fm in turn delegates their ...
6
votes
2
answers
603
views
Is a sent email in someone else’s inbox subject to data subject rights of the sender?
Suppose Bob emails Alice, and both use Hotmail for their e-mail provider. Bob then deletes the message from his sent mail folder. Could Bob issue a subject access request (SAR) to Hotmail for the ...
10
votes
4
answers
3k
views
Is a company liable if someone leaves their bank logged in on a company PC?
If a company sets up computers in a break area for employees to access their timecard, payroll, bank accounts, etc., can the company get in trouble if an employee leaves their private accounts logged ...
0
votes
2
answers
45
views
Official source for Data Export legislation (UK)
I need to find an official source for "Data Export" legislation that applies within the UK, I have searched the .GOV websites and found various pages that refer to physical item (military ...
1
vote
1
answer
52
views
"We only collect anonymized data". Roughly what are the limits of this?
Say a program that Bob is using asks to collect "anonymized data". Bob agrees. But roughly at what point is "anonymized" a false statement?
If I have Bob's shopping habits, gendre, ...
2
votes
1
answer
70
views
Must medical providers/businesses give a copy of a patient's medical record to the patient if the patient requests it in France?
In the US, medical providers must by law give a copy of a patient's medical record to the patient within 30 days if the patient requests it, according to 45 CFR 164.524(b)(2):
Timeliness in Providing ...
3
votes
1
answer
98
views
What is the legality of the use of non-commercial-use-only software as a tool in a company?
I'm doing some experimentation with machine learning, for purely educational/scientific purposes, and one of the concerns that came up, is:
If I use training materials (images and other data) ...
0
votes
0
answers
72
views
Does FDA require Clinical Research Companies/labs required to use relational/non-relational databases to store or document clinical trial data?
Are American Clinical Research Companies or laboratories doing analysis for clinical trials required to use relational databases or non-relational databases or Relational Database Management Systems ...
1
vote
0
answers
33
views
Data Privacy Laws in the US
I have found a website that likely has several hundred thousands of users where it's possible to look at the network traffic in order to see other users' personal information (email address, date of ...
8
votes
3
answers
2k
views
Must public content/data created by a US city have an open license?
I read on https://resources.data.gov/open-licenses/ that works created by U.S. Government employees within the scope of their employment default to the public domain:
The Federal Open Data Policy ...
2
votes
0
answers
100
views
Nasdaq API Usage
I, and others, have discovered that Nasdaq's website is powered by an API which has the endpoint api.nasdaq.com. As far as I can tell, it is fully legal to scrape Nasdaq's website (correct me if I'm ...
0
votes
2
answers
104
views
Scraping, curating, and re-publishing content
In data science, research need large corpora of text, image, or video data. Luckily, these can be acquired en masse today by scraping the web in general or specific sites, such as YouTube. For ...
0
votes
0
answers
23
views
Glassdoor Alternative and usage of company data
I have created Glassdoor alternative for specific country, which uses reviews and salaries submitted by users. I know that review is just users opinion on which company can't ask me to delete, but ...
0
votes
1
answer
75
views
My previous employer had a data breach
It seems my bank account details. Passport information. Address etc have been leaked. I left the company 3 years and 4 months ago.
It’s a private law firm. They have offered me a 12 month credit ...
2
votes
1
answer
148
views
Can I use forum posts related to user to analyze them?
I would like to create an app, which would make analyses based on user behaviors, posts, comments.
I can gather those data from sites, forums because e.g twitter and so are public websites, they are ...
1
vote
1
answer
61
views
How long should I wait for a Data Access Request in Ireland
A few weeks ago I made a Data Access request to an Irish company I've been doing business with for just over 10 years. I've not received any sort of response - not even an acknowledgment of my e-mail. ...
0
votes
1
answer
100
views
Is it legal to migrate data from old software to new software?
I'm wondering about the legality of migrating data between two competitor software, particularly for this purpose. Customer buys new software and want to migrate their old data.
Is it legal for the ...
0
votes
2
answers
50
views
Finding record of jury selection (peremptory challenges and challenges for cause) on PACER?
I am looking for records of the jury selection process in federal U.S. cases.
I am particularly interested in records indicating the names of prospective jurors and whether they were challenged ...
1
vote
1
answer
157
views
Is it illegal for a school to take photos of children during online classes?
Consider a situation where some students are required to turn on the camera during online classes - my question is:
If a student's facial image is collected during online classes, is parental consent ...
10
votes
4
answers
2k
views
Does derivative works law allow someone to create a new work based on an old one as long as they make modifications?
How can I find out if extracting Microsoft Word 2019 thesaurus (for another person by a freelancer) is legal or (very likely) not?
I tried searching in Google, but this question seems to be not very ...
0
votes
1
answer
89
views
How can you guarantee deletion of consumer data on the internet?
I have a bit of conundrum in thinking of making a business directory site listing businesses and people in a community-driven/edited way (like Wikipedia).
Say that a community of people add personal ...
1
vote
1
answer
64
views
Storing data from stock data feed provider like Yahoo! Finance or FMP Cloud
Suppose a developer creates a web application for stock market alerts and notifications. Is it legal to store data obtained from purchased subscription of data feed providers like Yahoo! Finance or ...
4
votes
2
answers
862
views
If a company actively and knowingly displays user passwords to their staff, is it breaking GDPR laws?
I used to work for a company, where they have a team of moderators, who actively monitor which accounts are scammers etc. To monitor this they can find links between user accounts via a users password,...
3
votes
1
answer
167
views
Can I avoid telling the police my password by regenerating my key each time?
Under the Regulation of Investigatory Powers Act 2000 Part III Section 49 the police can, with a certain procedure, require one to provide a key with threat of custodial sentence up to 2.5 years if ...
2
votes
0
answers
61
views
GDPR data deletion: can I ask the company to delete the data it had exported in the United States?
I am located in Italy.
I have subscribed to a service and provided some PII that "could be exported in the United States".
If I send a GDPR request to delete my data, can I ask them to also ...
-1
votes
1
answer
31
views
Are there databases that collect historical state and local government-initiated lawsuits against corporations?
For instance, this database collects federal lawsuits against corporations.
Is there an equivalent one that collects state and local government initiated lawsuits?
1
vote
0
answers
169
views
Mendeley is encrypting my data on my hard disk with a key only available to them: can I ask for unencrypted data under GDPR?
I use Mendeley Desktop to manage my bibliography. Now I want to switch to Zotero.
Zotero used to be able to import the Mandeley's database. However, Mendeley 1.19 encrypted my data on my HDD with a ...
14
votes
1
answer
3k
views
Brute force, mass image production copyright trolling? [duplicate]
Let's say I have an "infinite computer" that could iterate through and generate 1000x1000px images iterating through all colour combinations (I understand there would be waaaaaay too much ...
5
votes
4
answers
553
views
Supreme Court Cases That Have Been Decided on Statistical Evidence---Are There Any?
Have there been any Supreme Court cases that have been decided based on statistical evidence?
If so, which ones; and what was the evidence presented?
In 1897, Oliver Wendell Holmes (before he became a ...
1
vote
0
answers
30
views
How can an app company determine the validity of legal requests for user data from various countries?
Context
Suppose the following example (but I'd be grateful for clarifying comments and exceptions that make the rule):
An app named Twombly is made by a company registered in the United Kingdom.
Users ...
0
votes
1
answer
2k
views
Do initials count as personal data?
If I had a database of customer names and I'm to transfer it to another party, how much scrubbing can be done until it's no longer personal information?
If I abbreviated customer names like John Doe ...
0
votes
2
answers
532
views
Inactive account deleted under GDPR (data retention) laws. Should the credit on it have been refunded to the account holder?
I have a situation where a UK utility (mobile phone) account has been inactive for more than 7 years.
The account was deleted under data retention laws (GDPR) but had a positive credit balance at the ...
-1
votes
1
answer
140
views
GDPR account verification
I am having trouble in deciding what information I should be recording in order to verify an account user in the event that
a) the user is locked out of their account for some reason
b) they make an ...
1
vote
1
answer
79
views
Am I allowed to sell the reviews of my product to another company?
I ran a company which closed down two months ago. One of my former competitor's has contacted me about buying my branding, product formulations, and business name.
They are not interested in my ...
1
vote
1
answer
101
views
For non-commercial research purposes is it legal to collect images using Google and Bing?
Would it be legal to collect images from Google and Bing and then use them within non-commercial research. These images would never be redistributed and during the research be converted into data that ...
1
vote
1
answer
83
views
How does GDPR affect game data and how it is processed?
A real-time strategy game's data involving player points is available publicly (the point data is paired with their username). A player gains points through actions such as 'attacking' and 'building'.
...
3
votes
2
answers
204
views
What does "structured, commonly used and machine-readable format" look like in practice?
I have made a subject access request, and the result included:
Statement that their right to process data is from Article 6(1)(b)
A series of images, that appear to be photographs of a computer ...
13
votes
1
answer
4k
views
Does the German GDPR require storing the data in a German datacenter for a tele-health company?
I co-founded a tele-health startup, we are expanding to Germany,
we have gone through the GDPR, and implemented most of it, however, we didn't quite understand the data residency part and found ...
6
votes
1
answer
367
views
Can a company charge you to update your address under GDPR?
I was just charged £30 (over the phone) to update my address with an insurance company. I didn't contest it at first and pulled out my wallet to pay the fee and did. However, while I was on the phone ...
2
votes
1
answer
149
views
is fictional data covered by copyright?
From other questions about intellectual property, it's my understanding that:
"measurements of observable fact in the world ... are not copyrightable", but arrangements of the data are.
fictional ...
2
votes
1
answer
106
views
Is it legal for a company to not allow me to download my data unless I pay for the premium plan?
I started using a website on the free version knowing it was somewhat locked down. But after using it for a while I learned that I cant download my own data unless I pay for the premium plan. I am ...
1
vote
3
answers
494
views
What legal recourse do we have against Clearview AI's collection of our personal data and terrifying privacy policy?
TL;DR: how do we get the data this company collected on us without also giving them our government-issued IDs that they could potentially keep and tie to our "profiles"?
A week ago (January ...
0
votes
0
answers
39
views
Does data protection apply under a power of attorney relationship?
I have hired a relocation company to help me with dealing with the immigration office and I have signed a power of attorney so that they can visit the authorities and get feedback on my application on ...
1
vote
1
answer
821
views
Can a database format/schema be copyrighted separately from the data?
I came across a map tile format which requires attribution for use, regardless of the license of the data it contains. The format specifies how and what map features (roads, water, etc) should be ...
3
votes
1
answer
45
views
Identity verification prior granting access to personal data [GDPR]
When receiving by E-Mail a Subject Access Request (SAR), which steps must be taken to ensure that the person requesting the SAR is the effective owner of the personal data?