Questions tagged [data]

The tag has no usage guidance.

Filter by
Sorted by
Tagged with
11 votes
3 answers
7k views

Legality of Using Unofficial API

I have discovered a mobile app's backend API through reverse engineering. The public can access this API and it does not require specific authorization, however, it is not documented and it is not an ...
Tim's user avatar
  • 129
4 votes
1 answer
195 views

Does the Colorado Privacy Act apply to churches with memberships (ex: Jehovah’s Witnesses)?

Suppose a person living in Colorado is a registered member of a church. In this church, certain “blessings” are considered contingent on your membership. Membership is recorded on a digital system. ...
moonman239's user avatar
  • 3,060
4 votes
1 answer
91 views

How does GDPR's right to erasure apply to deduplicated storage?

I am trying to understand GDPR's right to erasure (and principle of storage limitation) in the following case: Company A offers a online data storage service that is intended to be used by the users ...
Tomas's user avatar
  • 43
16 votes
1 answer
763 views

Is it illegal for a firm to train an AI model on a CC BY-SA 4.0 corpus and make a commercial use of it without distributing the model under CC BY-SA?

https://meta.stackexchange.com/q/388551/178179 mentions that SE will force some firms to pay to be allowed to train an AI model on the SE data dump (CC BY-SA licensed) and make a commercial use of it ...
Franck Dernoncourt's user avatar
1 vote
1 answer
93 views

How can you make a fresh new translation of the bible without running into copyright problems?

I have been looking for open source versions of the bible written in Hebrew, with annotations, such as the literal english meaning of each Hebrew term, the definition of each Hebrew term, the part of ...
Lance's user avatar
  • 759
0 votes
1 answer
30 views

Can two or more different entities simultaneously be data controllers for the same data?

Suppose Alice is a customer of a business ACME who holds data on her like email correspondence. ACME uses a third party to manage their email, suppose Fastmail.fm. Fastmail.fm in turn delegates their ...
Seeking answers's user avatar
6 votes
2 answers
603 views

Is a sent email in someone else’s inbox subject to data subject rights of the sender?

Suppose Bob emails Alice, and both use Hotmail for their e-mail provider. Bob then deletes the message from his sent mail folder. Could Bob issue a subject access request (SAR) to Hotmail for the ...
Seeking answers's user avatar
10 votes
4 answers
3k views

Is a company liable if someone leaves their bank logged in on a company PC?

If a company sets up computers in a break area for employees to access their timecard, payroll, bank accounts, etc., can the company get in trouble if an employee leaves their private accounts logged ...
Randy Miller's user avatar
0 votes
2 answers
45 views

Official source for Data Export legislation (UK)

I need to find an official source for "Data Export" legislation that applies within the UK, I have searched the .GOV websites and found various pages that refer to physical item (military ...
Darkcat Studios's user avatar
1 vote
1 answer
52 views

"We only collect anonymized data". Roughly what are the limits of this?

Say a program that Bob is using asks to collect "anonymized data". Bob agrees. But roughly at what point is "anonymized" a false statement? If I have Bob's shopping habits, gendre, ...
chausies's user avatar
  • 3,269
2 votes
1 answer
70 views

Must medical providers/businesses give a copy of a patient's medical record to the patient if the patient requests it in France?

In the US, medical providers must by law give a copy of a patient's medical record to the patient within 30 days if the patient requests it, according to 45 CFR 164.524(b)(2): Timeliness in Providing ...
Franck Dernoncourt's user avatar
3 votes
1 answer
98 views

What is the legality of the use of non-commercial-use-only software as a tool in a company?

I'm doing some experimentation with machine learning, for purely educational/scientific purposes, and one of the concerns that came up, is: If I use training materials (images and other data) ...
Kevin's user avatar
  • 131
0 votes
0 answers
72 views

Does FDA require Clinical Research Companies/labs required to use relational/non-relational databases to store or document clinical trial data?

Are American Clinical Research Companies or laboratories doing analysis for clinical trials required to use relational databases or non-relational databases or Relational Database Management Systems ...
BornPerson's user avatar
1 vote
0 answers
33 views

Data Privacy Laws in the US

I have found a website that likely has several hundred thousands of users where it's possible to look at the network traffic in order to see other users' personal information (email address, date of ...
KW1's user avatar
  • 11
8 votes
3 answers
2k views

Must public content/data created by a US city have an open license?

I read on https://resources.data.gov/open-licenses/ that works created by U.S. Government employees within the scope of their employment default to the public domain: The Federal Open Data Policy ...
Franck Dernoncourt's user avatar
2 votes
0 answers
100 views

Nasdaq API Usage

I, and others, have discovered that Nasdaq's website is powered by an API which has the endpoint api.nasdaq.com. As far as I can tell, it is fully legal to scrape Nasdaq's website (correct me if I'm ...
luke's user avatar
  • 21
0 votes
2 answers
104 views

Scraping, curating, and re-publishing content

In data science, research need large corpora of text, image, or video data. Luckily, these can be acquired en masse today by scraping the web in general or specific sites, such as YouTube. For ...
quirky_dog's user avatar
0 votes
0 answers
23 views

Glassdoor Alternative and usage of company data

I have created Glassdoor alternative for specific country, which uses reviews and salaries submitted by users. I know that review is just users opinion on which company can't ask me to delete, but ...
Saba's user avatar
  • 1
0 votes
1 answer
75 views

My previous employer had a data breach

It seems my bank account details. Passport information. Address etc have been leaked. I left the company 3 years and 4 months ago. It’s a private law firm. They have offered me a 12 month credit ...
That 30s Guy's user avatar
2 votes
1 answer
148 views

Can I use forum posts related to user to analyze them?

I would like to create an app, which would make analyses based on user behaviors, posts, comments. I can gather those data from sites, forums because e.g twitter and so are public websites, they are ...
czupe's user avatar
  • 123
1 vote
1 answer
61 views

How long should I wait for a Data Access Request in Ireland

A few weeks ago I made a Data Access request to an Irish company I've been doing business with for just over 10 years. I've not received any sort of response - not even an acknowledgment of my e-mail. ...
entropy's user avatar
  • 13
0 votes
1 answer
100 views

Is it legal to migrate data from old software to new software?

I'm wondering about the legality of migrating data between two competitor software, particularly for this purpose. Customer buys new software and want to migrate their old data. Is it legal for the ...
EGN's user avatar
  • 161
0 votes
2 answers
50 views

Finding record of jury selection (peremptory challenges and challenges for cause) on PACER?

I am looking for records of the jury selection process in federal U.S. cases. I am particularly interested in records indicating the names of prospective jurors and whether they were challenged ...
FZS's user avatar
  • 111
1 vote
1 answer
157 views

Is it illegal for a school to take photos of children during online classes?

Consider a situation where some students are required to turn on the camera during online classes - my question is: If a student's facial image is collected during online classes, is parental consent ...
snowball's user avatar
10 votes
4 answers
2k views

Does derivative works law allow someone to create a new work based on an old one as long as they make modifications?

How can I find out if extracting Microsoft Word 2019 thesaurus (for another person by a freelancer) is legal or (very likely) not? I tried searching in Google, but this question seems to be not very ...
082021's user avatar
  • 111
0 votes
1 answer
89 views

How can you guarantee deletion of consumer data on the internet?

I have a bit of conundrum in thinking of making a business directory site listing businesses and people in a community-driven/edited way (like Wikipedia). Say that a community of people add personal ...
Lance's user avatar
  • 759
1 vote
1 answer
64 views

Storing data from stock data feed provider like Yahoo! Finance or FMP Cloud

Suppose a developer creates a web application for stock market alerts and notifications. Is it legal to store data obtained from purchased subscription of data feed providers like Yahoo! Finance or ...
Pratik Charwad's user avatar
4 votes
2 answers
862 views

If a company actively and knowingly displays user passwords to their staff, is it breaking GDPR laws?

I used to work for a company, where they have a team of moderators, who actively monitor which accounts are scammers etc. To monitor this they can find links between user accounts via a users password,...
Tom's user avatar
  • 43
3 votes
1 answer
167 views

Can I avoid telling the police my password by regenerating my key each time?

Under the Regulation of Investigatory Powers Act 2000 Part III Section 49 the police can, with a certain procedure, require one to provide a key with threat of custodial sentence up to 2.5 years if ...
Rod's user avatar
  • 537
2 votes
0 answers
61 views

GDPR data deletion: can I ask the company to delete the data it had exported in the United States?

I am located in Italy. I have subscribed to a service and provided some PII that "could be exported in the United States". If I send a GDPR request to delete my data, can I ask them to also ...
robertspierre's user avatar
-1 votes
1 answer
31 views

Are there databases that collect historical state and local government-initiated lawsuits against corporations?

For instance, this database collects federal lawsuits against corporations. Is there an equivalent one that collects state and local government initiated lawsuits?
J Li's user avatar
  • 597
1 vote
0 answers
169 views

Mendeley is encrypting my data on my hard disk with a key only available to them: can I ask for unencrypted data under GDPR?

I use Mendeley Desktop to manage my bibliography. Now I want to switch to Zotero. Zotero used to be able to import the Mandeley's database. However, Mendeley 1.19 encrypted my data on my HDD with a ...
robertspierre's user avatar
14 votes
1 answer
3k views

Brute force, mass image production copyright trolling? [duplicate]

Let's say I have an "infinite computer" that could iterate through and generate 1000x1000px images iterating through all colour combinations (I understand there would be waaaaaay too much ...
personjerry's user avatar
5 votes
4 answers
553 views

Supreme Court Cases That Have Been Decided on Statistical Evidence---Are There Any?

Have there been any Supreme Court cases that have been decided based on statistical evidence? If so, which ones; and what was the evidence presented? In 1897, Oliver Wendell Holmes (before he became a ...
mlchristians's user avatar
  • 1,285
1 vote
0 answers
30 views

How can an app company determine the validity of legal requests for user data from various countries?

Context Suppose the following example (but I'd be grateful for clarifying comments and exceptions that make the rule): An app named Twombly is made by a company registered in the United Kingdom. Users ...
fragilefire's user avatar
0 votes
1 answer
2k views

Do initials count as personal data?

If I had a database of customer names and I'm to transfer it to another party, how much scrubbing can be done until it's no longer personal information? If I abbreviated customer names like John Doe ...
gator's user avatar
  • 115
0 votes
2 answers
532 views

Inactive account deleted under GDPR (data retention) laws. Should the credit on it have been refunded to the account holder?

I have a situation where a UK utility (mobile phone) account has been inactive for more than 7 years. The account was deleted under data retention laws (GDPR) but had a positive credit balance at the ...
Brybeck's user avatar
  • 101
-1 votes
1 answer
140 views

GDPR account verification

I am having trouble in deciding what information I should be recording in order to verify an account user in the event that a) the user is locked out of their account for some reason b) they make an ...
Milambardo's user avatar
1 vote
1 answer
79 views

Am I allowed to sell the reviews of my product to another company?

I ran a company which closed down two months ago. One of my former competitor's has contacted me about buying my branding, product formulations, and business name. They are not interested in my ...
gator's user avatar
  • 115
1 vote
1 answer
101 views

For non-commercial research purposes is it legal to collect images using Google and Bing?

Would it be legal to collect images from Google and Bing and then use them within non-commercial research. These images would never be redistributed and during the research be converted into data that ...
Strah Behry's user avatar
1 vote
1 answer
83 views

How does GDPR affect game data and how it is processed?

A real-time strategy game's data involving player points is available publicly (the point data is paired with their username). A player gains points through actions such as 'attacking' and 'building'. ...
Shuri2060's user avatar
  • 111
3 votes
2 answers
204 views

What does "structured, commonly used and machine-readable format" look like in practice?

I have made a subject access request, and the result included: Statement that their right to process data is from Article 6(1)(b) A series of images, that appear to be photographs of a computer ...
Dave's user avatar
  • 817
13 votes
1 answer
4k views

Does the German GDPR require storing the data in a German datacenter for a tele-health company?

I co-founded a tele-health startup, we are expanding to Germany, we have gone through the GDPR, and implemented most of it, however, we didn't quite understand the data residency part and found ...
ali.bh's user avatar
  • 233
6 votes
1 answer
367 views

Can a company charge you to update your address under GDPR?

I was just charged £30 (over the phone) to update my address with an insurance company. I didn't contest it at first and pulled out my wallet to pay the fee and did. However, while I was on the phone ...
metaDesign's user avatar
2 votes
1 answer
149 views

is fictional data covered by copyright?

From other questions about intellectual property, it's my understanding that: "measurements of observable fact in the world ... are not copyrightable", but arrangements of the data are. fictional ...
Foo Bar's user avatar
  • 143
2 votes
1 answer
106 views

Is it legal for a company to not allow me to download my data unless I pay for the premium plan?

I started using a website on the free version knowing it was somewhat locked down. But after using it for a while I learned that I cant download my own data unless I pay for the premium plan. I am ...
sonfollower's user avatar
1 vote
3 answers
494 views

What legal recourse do we have against Clearview AI's collection of our personal data and terrifying privacy policy?

TL;DR: how do we get the data this company collected on us without also giving them our government-issued IDs that they could potentially keep and tie to our "profiles"? A week ago (January ...
Chris Cirefice's user avatar
0 votes
0 answers
39 views

Does data protection apply under a power of attorney relationship?

I have hired a relocation company to help me with dealing with the immigration office and I have signed a power of attorney so that they can visit the authorities and get feedback on my application on ...
sen_saven's user avatar
  • 113
1 vote
1 answer
821 views

Can a database format/schema be copyrighted separately from the data?

I came across a map tile format which requires attribution for use, regardless of the license of the data it contains. The format specifies how and what map features (roads, water, etc) should be ...
Skylar Ittner's user avatar
3 votes
1 answer
45 views

Identity verification prior granting access to personal data [GDPR]

When receiving by E-Mail a Subject Access Request (SAR), which steps must be taken to ensure that the person requesting the SAR is the effective owner of the personal data?
CaballoBlanco's user avatar