Stack Exchange Network

Stack Exchange network consists of 174 Q&A communities including Stack Overflow, the largest, most trusted online community for developers to learn, share their knowledge, and build their careers.

Visit Stack Exchange

Questions tagged [data-protection]

The tag has no usage guidance.

2
votes
0answers
39 views
+50

A website monitoring their own users is considered to be monitoring individual's behavior on internet on a large scale?

One of the questions in the "Test" provided by ICO, to check whether a DPO (Data Protection Officer) is required or not, is: Do your organisation's core activities require regular and systematic ...
0
votes
0answers
15 views
+50

Hold Special Category in database and optionally displays on Profile page - is DPO required?

Say a Social website (not a dating website, but a website similar to Twitter) has an option in the Profile customization where the user can select their sexual orientation. This is an optional field (...
0
votes
1answer
22 views

How can GDPR affect user generated content?

I'm wondering where the lines of GDPR are in regard to user generated content and how it meets the Communications Decency Act. Section 230 has been what ISPs and websites (Yelp as an example) use as ...
1
vote
2answers
56 views

Deliberately inaccurate data

The GDPR seem to assume that the client would want us to maintain accurate data. Article 5(1)(d) makes it clear we have to correct inaccurate data. But I deliver pizzas for a big chain, and I ...
0
votes
0answers
20 views

What protects me against bias and information mishandling in the UK?

I have made an application for the Tier 1 (Talent) Visa in the UK. The first stage is to acquire endorsement by a company which contacts experts in the field to assess the application. At first, my ...
0
votes
0answers
32 views

Is it possible to sue Facebook after the most recent data breach?

I read on Fox news that Facebook could be forced to pay you nearly $8G after ‘disaster’ hack attack that left 50M users exposed. Someone I know has been affected by the hack, he was logged out of his ...
0
votes
1answer
59 views

Hetzner is trying to charge me for Bandwidth overuse and will not respond when I use the contact form

A few months ago, I was using Hetzner Cloud for my VPS, and they blocked a server because someone seems to have DDoSed it. I requested it to be unblocked, and they ignored me. I also noticed they are ...
2
votes
1answer
21 views

GDPR and Storing Non-EU Citizen Data as an EU-based company

I work for an EU company based in the UK and often work with clients in China and Africa (and some other non-EU countries). In the future, it may arise that we will be storing some personal ...
1
vote
2answers
47 views

Is it legal to require registration to obtain US Government software or data?

Is it legal to require registration to obtain US Government software or data? For example, if a government web site makes you put in an email address before you can access public data or public ...
1
vote
1answer
86 views

Is it reasonable to ask me to change my email address after it was leaked?

My child's school recently sent an email with many parents Cc'd instead of Bcc'd. There was nothing sensitive about the email - it just leaked the email addresses of the other parents. They later ...
1
vote
0answers
34 views

Derogation for small companies in GDPR

Question What does Recital 13 in GDPR make exempt? refers to Article 30 on the technical definition on record keeping. But I am interested in another aspect of this sentence: To take account of ...
0
votes
1answer
51 views

Software Startup Legal Consulting [closed]

I was curious how important it is for a software startup to seek legal council during the fundraising/growth stages. Basically, I don't want to be up a creek if we have some data breach or hack. How ...
0
votes
1answer
68 views

Is it legal to list parties not willing to take part in a survey?

I am building a website where hospitals, schools and hotels would be rated by referring to several factors. I need to collect the data (certificates, documents, etc...) from the hospitals/schools/...
8
votes
2answers
214 views

Facebook vs GDPR - Private Messages I sent to others will never be deleted/erased from Facebook servers

I asked this question to Facebook: I would like to know how can I permanently delete private messages from both sides of the conversation. For example, conversations I had in the past with ...
1
vote
2answers
43 views

Sharing confidential information between two companies

I own a small company and submitted a proposal to a major company and I received no response. Another company considered my proposal and invited me to present the proposal to the board. I was asked ...
5
votes
2answers
102 views

Are publicly available password dumps legal under GDPR

When a company gets breached by hackers, often the contents of their databases will make its way onto the internet. Sometimes this will include obviously personal information such as email contents or ...
2
votes
0answers
25 views

GDPR which practice is compliant?

I have seen many ways of requiring user acceptance of their data usage on the internet. Which are conforming? Keep in mind I am talking just about the consent acquiring mechanism. In order from the ...
1
vote
1answer
53 views

GDPR and Query String Variables

I have a project where a customised email is sent out to clients and there is a link that takes them to a landing page, with a form, that currently gets populated by way of query string variables e.g. ...
3
votes
2answers
65 views

Recruiter forwarding freelancer's profile without consent

I work as a freelancer, so being contacted by recruiters is a regular occurrence. Recently I responded to a request from a recruiter of a UK-based, "award-winning" recruitment company. We talked on ...
5
votes
2answers
236 views

Is hash of a username still personal data?

I create a script, which asks a user who upload a GIF to a social media website, if it can reupload it to another website (to reduce other users' internet usage). Now I want to give users an option to ...
0
votes
0answers
23 views

To what extent does US Law allow algorithmic transparency?

The European Union GDPR (General Data Protection Regulation) is a regulation in EU law on data protection and privacy for all individuals within the European Union ...It also addresses the export of ...
0
votes
2answers
61 views

Privacy concerns regarding my data on a website

Recently, I signed up on this website. As soon as I registered, they sent me an activation email. After seeing the activation email, I was a little disturbed. The activation email consisted of the ...
1
vote
1answer
29 views

What prosecution can one expect for violation of information privacy principles in New Zealand?

I recently received a marketing letter in my mailbox from a building supplies company that I had never dealt with. Upon contacting them I found out that they had bought a database of people who had ...
6
votes
2answers
193 views

GDPR. Where to store users consent?

A pretty straightforward question, I think. When it comes to holding records that users consent has been provided, I can only imagine I would use some sort of php code to store data/records into .txt ...
1
vote
1answer
86 views

Facebook blocked my account until I consent to their new privacy policy under GDPR. If I consent now, will I be able to withdraw my consent later?

I am going to delete my Facebook account in a month, I can't do it now because I still use it for work. I live in the EU and Facebook has blocked access to my account unless I accept their privacy ...
3
votes
1answer
166 views

Is it allowed to Psuedonym or Soft delete the User Records in a highly complex User centric Software under GDPR?

I referred this question: Under the GDPR, should transaction data be deleted on account deletion or on user request? which deals specifically with the use-case of e-commerce site. But still, there is ...
0
votes
0answers
94 views

Android App GDPR: ads and purchases

Problem description Just imagine a typical app or mobile game here: This app has the option to disable ads using in-app purchases. These purchases are resolved using the following API. A detailed ...
2
votes
0answers
124 views

Explanations for GDPR if no personal data is collected?

I have a website that is a travel search engine and I am very concerned about GDPR. I am not interested in any private information from the users for marketing or such things. I just use Google ...
0
votes
1answer
67 views

Autoresponders and GDPR - do they comply with the law?

Would it be GDPR compliant to have an autoresponder request opt-in permission? For example, a customer makes an enquiry by sending an email to the company in question. The company in question then ...
3
votes
2answers
222 views

Is the GDPR applicable to data stored in human memory?

If data is stored in human memory, is the GDPR applicable? Say, an employee of a company remembers an email address of a client, their date of birth, or even what their face looks like, does the ...
1
vote
1answer
162 views

Parent company GDPR compliance

Situation: Parent company is registered in the EU member state but does not do b2c business in the EU and does not process personal data of Europeans. Subsidiaries are not EU companies and does not ...
3
votes
1answer
94 views

Should email addresses be anonymized/pseudonymized under GDPR?

GDPR states recommendation to pseudonymise or even anonymise Personal Data. A lot — most of — web sites and services require email address on signup. Should, from the Data Controller's point of view, ...
1
vote
1answer
41 views

Can we collect data from minors to operate a competition with a prize?

We're planning to run a simple competition at an event. It's a skill based competition (not a lottery), where the best score at the end of the event will receive an android tablet. No purchase is ...
0
votes
2answers
57 views

Council “misplaced” copy of contract - is this a data protection breach (UK)?

My Girlfriend changed jobs recently, and as such had to provide the local council with a copy of her employment contract to support claims for low-income support benefits. Now, it seems they have ...
-1
votes
2answers
34 views

Which companies use personal data [closed]

I am not an expert in Law and I apologize if I make a big mistake by choosing wrong words. Since there are lots of new laws about data protection being enforced by courts, it became easier to see if ...
2
votes
1answer
548 views

Germany: Does a github.io hosted site require imprint / data privacy statement according to the GDPR?

github offers free publicly accessible data storage. Many people use that to present their personal profile where they e.g. advertise for freelancing services. An example url could be http://username....
1
vote
2answers
67 views

Can my user agreement require end users to indemnify me for misuse of their data by third-party services embedded in my app?

I have an Android App which is already in the Play Store. Now due to GDPR I am planning to improve my Privacy Policy and a Terms of service. I am planning to add certain terms in my Terms of service ...
4
votes
1answer
239 views

How does the CLOUD Act apply for non-US persons' data stored on US-owned servers outside the USA?

The Clarifying Lawful Overseas Use of Data Act or CLOUD Act (H.R. 4943) was signed into law on March 23, 2018. The law became necessary because the previous legislation in the Stored Communications ...
2
votes
0answers
40 views

GDPR - Right of Access From Processor

If my organisation is processing data on behalf of a controller, does the data subject have access rights through the processor, or must Subject Access Requests (SARs) go through the controller? If ...
1
vote
1answer
123 views

Is there a UK equivalent to the USA's FERPA?

The Family Education Rights and Privacy Act (FERPA) describes rights students have to their private records in the United States. Is there an equivalent for students in the United Kingdom?
3
votes
2answers
272 views

How does GDPR affect sports statistics?

I am involved in maintaining few sports statistics systems. Of course, these systems are full of personal data. It is important to keep a list of players in a hockey game and a name associated with a ...
1
vote
3answers
63 views

Is ”data breach” a correct way to describe the Facebook scandal?

I’m reading the words ”data breach” a lot in the Facebook Cambridge Analytica scandal context (example). But is this a correct way to describe the scandal? The definition of data breach from the ...
1
vote
0answers
28 views

GPDR and remote working

I work as a software developer at a relatively small software company in the UK. My employer is very concerned about the new GPDR law coming into effect in May for the below reasons We currently have ...
0
votes
1answer
51 views

Can I share IP adresses of machine who attempted logins?

I started a small experiment. I put up a few servers on digital ocean and I started logging all the failed login attempts. They were numerable. The dataset after a week is a fun one to play with. I'...
0
votes
0answers
19 views

Is Facebook legally required to disclose re: Cambridge Analytica's (ab)use of user data?

Many states (not just in the US; nation states, too) have laws requiring data processors or data controllers to notify data subjects of data breaches affecting the subjects' data. In the case of the ...
6
votes
1answer
988 views

Are chat logs against the new european GDPR?

Is keeping logs of chats (e.g. IRC, in this specific case Twitch chat) against the new European General Data Protection Regulation? I know you can't save data which can be linked to a natural person ...
0
votes
0answers
15 views

Which law is applicable for disclosing user information in response to government or law enforcement legal demands in Singapore?

Instagram discloses account records solely in accordance with applicable law, including the federal Stored Communications Act (“SCA”). What about Singapore, which law is applicable for disclosing user ...
7
votes
3answers
338 views

Does the GDPR allow me to access data from public sources, store it and anaylize it?

I've been researching about the GDPR on the internet to find an answer to my question, but I have not found a concrete answer. Does the GDPR allow me (my software/server) to derive data, store it and ...
2
votes
1answer
82 views

Advice sought regarding GDPR and managing sensitive data

We have a site that has very sensitive information including medical and information about children. This is on a public website with many organisations shared on one server. There are files that are ...
1
vote
0answers
135 views

Encryption export compliance document in iOS app store

I am using encrypted core data (a wrapper of sqlcipher for core data) in my application in order to encrypt the database, and later before submitting the app to the appstore, I happened to notice that ...