Skip to main content

All Questions

Filter by
Sorted by
Tagged with
14 votes
2 answers
3k views

Does revealing the owner of an anonymous forum account breach GDPR (or other) laws?

This whole thing is to do with using an IP address to identify an anonymous forum account and then sharing details of the ownership of this account with another member. I will explain the best I can: ...
Michael Morgan's user avatar
6 votes
2 answers
1k views

As per GDPR, how are the agree/disagree to cookie buttons to be designed?

I just stumbled over this very... interesting cookie dialogue on the Ansible site: How am I, as the average user, to decide if I'm agreeing or not to the choice with "Out" or "In"?...
Flying Thunder's user avatar
5 votes
1 answer
383 views

Deletion of personal data

I recently registered an account on an employment agency website. Had to provide my email address, a password and of course all of my personal data, including my complete professional background. ...
MrUpsidown's user avatar
3 votes
3 answers
270 views

If you find something indexed on a search engine, is it legal to access and report that to the firm?

I found a US law firm's SQL database indexed on Google exposing email addresses, phone numbers, comments/questions of its clients. Not to mention the user database with even worse information. This is ...
user avatar
3 votes
1 answer
176 views

Are there any legal limitations to using IP based authorisation so that only users from client premises can have access to cloud?

We have a cloud-based B2B solution that is meant to help them collate and manage their operational data. One of clients wants to ensure that their employees can only access their data from devices ...
Sidharth Sreekumar's user avatar
2 votes
3 answers
499 views

Does GDPR consent notification apply to access points intended purely for maintenance?

Suppose I have a publicly available interface, intended to be used exclusively by me or my employees for the purposes of maintenance, e.g. an SSH server. Since I am processing user's IP address when ...
user avatar
2 votes
1 answer
136 views

GPDR: Are third party companies alowed to track my e-mails

I live in Ireland and I've been doing business with an Irish company. That company has using a third party for its main IT system and this system has been sending me e-mails. Just recently I've had a ...
Stormcloud's user avatar
2 votes
1 answer
209 views

What legal actions can we take for website that doesn't remove PII upon requests?

A business directory listing website scraped old data for their listings. They use random contact information, personally identifiable information (PII), logos/banners to falsely represent those ...
Skies's user avatar
  • 338
2 votes
1 answer
169 views

Public WiFi - when do you have to delete stored user data?

Note: I originally thought of this for germany, but if you have examples from other countries those are also welcome, since im interested in the topic in general. So lets say im using a public WiFi, ...
Flying Thunder's user avatar
1 vote
3 answers
133 views

How to avoid having problem with data protection regulations (GDPR)?

I would like to make an online platform, where the users can upload videos or link YouTube videos. Right now, I don't want to earn anything through this website (maybe in a couple of years, and by ...
user1419243's user avatar
1 vote
1 answer
249 views

Does a hyperlink to a privacy policy have to be available after the user agrees?

A website that deals with personal user data is legally bound by CCPA Privacy Rights and GDPR Data Protection Rights. The user must agree to the privacy policy before the website has consent to share ...
Dev Oskii's user avatar
  • 191
1 vote
1 answer
114 views

Private company making it hard to delete customer's personal data

Storyline A friend of mine opened an account with an online company that sells picture prints. Without her knowing, just after signing in, somehow (she did not understand how; probably through the ...
Remi.b's user avatar
  • 145
1 vote
1 answer
104 views

Legality of Network companies scanning TCP ports - how has my consent been obtained?

In my firewall and IIS logs I constantly see entries for servers from companies like ZenLayer, Dedipath, DigitalOcean and other Network-related businesses that appear to ping/scan my systems to ...
Irresistance's user avatar
1 vote
2 answers
79 views

Can governments require administrators of groups on social media platforms to buy licenses?

The Kenyan government now wants administrators of WhatsApp groups and other social media platforms to pay for licenses. Is this possible with the GDPR, Facebook privacy policy, etc., as the proposed ...
griffins's user avatar
  • 113
1 vote
2 answers
137 views

Can my user agreement require end users to indemnify me for misuse of their data by third-party services embedded in my app?

I have an Android App which is already in the Play Store. Now due to GDPR I am planning to improve my Privacy Policy and a Terms of service. I am planning to add certain terms in my Terms of service ...
Rajesh K's user avatar
  • 203
1 vote
0 answers
163 views

Is YouTube legally required to not allow "Made For Kids" videos to be added to playlists?

In the last few years YouTube introduced a Made For Kids classification for videos, which requires uploaders to state whether a given video is made for children, in which case certain features are ...
Hashim Aziz's user avatar
0 votes
1 answer
269 views

I emailed a law and data privacy professor regarding an issue I was having to do with internet privacy law. Will I get in legal trouble for this?

I emailed an American law and data privacy professor to ask to help explain whether google could reveal my information if a court order was taken out to identify me. I was very over emotional in the ...
Jane doe's user avatar
0 votes
1 answer
78 views

Cloud providers and proprietary data

I have read the terms and conditions of my cloud service and they "reserve the right to monitor abusive or offensive usage", but I would like to know if they can spy on my proprietary data and use or ...
mrauto's user avatar
  • 11
0 votes
0 answers
102 views

Is it illegal to allow a minor to participate in a site satisfaction survey?

Consider some imaginary website, run by a US legal entity - let's call it Whack Stove Reflow - has registered users, some of whom are under 18. This imaginary website wants to take a community ...
einpoklum's user avatar
  • 627
-1 votes
2 answers
38 views

Which companies use personal data [closed]

I am not an expert in Law and I apologize if I make a big mistake by choosing wrong words. Since there are lots of new laws about data protection being enforced by courts, it became easier to see if ...
independentvariable's user avatar
-6 votes
2 answers
714 views

Is it legal for a business to deny me access to their store on the basis of how I look? [closed]

Is it legal for a business to use discriminatory (and notoriously false-positive) fingerprinting algorithms that prevent me from loading their website purely on the basis of how I look (as opposed to ...
Michael Altfield's user avatar