Questions tagged [data-protection-act]

The tag has no usage guidance.

Filter by
Sorted by
Tagged with
-3 votes
0 answers
86 views

What is the purpose of the Right of Access?

Does the GDPR or related instruments give any indication as to what it perceives as the importance of affording to individuals a right to access data held that may identify them? If so, then what is ...
1 vote
1 answer
54 views

Are data controllers required to acquire the means to appropriately redact data for disclosure to subjects?

Bob appears in CCTV footage that is held by all of ACME, BCME & CCME, but also features Alice and Charles. He requests access to the footage from all of the companies and receives three different ...
1 vote
0 answers
91 views

Does the GDPR/data protection act contain any anti-reprisal provisions?

The Information Commissioner's Office ICO advisers state that one “shouldn't” be treated any directly or less favourably as a result of exercising one’s rights under the legislation. What legal ...
8 votes
1 answer
3k views

Does GDPR apply when PII is already publicly available?

Pretend there is a website, it might be free to access, or be a paid per search service, where the users get access to summarised information on the people that they search for. All of the information ...
1 vote
1 answer
66 views

Does 2 party consent apply if the data is anonymized?

If I have a text conversation between myself and another party, both of whom reside in 2 party consent states in the US, if I remove all reasonably identifying information, do I still need consent ...
4 votes
1 answer
208 views

Does the Colorado Privacy Act apply to churches with memberships (ex: Jehovah’s Witnesses)?

Suppose a person living in Colorado is a registered member of a church. In this church, certain “blessings” are considered contingent on your membership. Membership is recorded on a digital system. ...
0 votes
1 answer
269 views

Is OpenAI/ChatGPT compliant with GDPR, if they don't allow changing or removing the Phone Number and Email Address?

Italy has recently banned ChatGPT, and is now allowing it again in the country, after they implemented a few privacy controls. The fact that it's now allowed again makes me wonder if Italy (and the ...
3 votes
2 answers
130 views

Access rights to professional photographs

An independent professional photographer uses a sales tactic of candidly taking photos of others in public and then approaching them and offering them copies for a price. Suppose one of these ...
0 votes
1 answer
137 views

Is it legal to store Singapore user data outside Singapore?

I am based out of india and has intent to launch the website in Singapore for singapore usesr where datastores and webservers will be hosted on data center in india. Is there any data protect act in ...
3 votes
2 answers
1k views

What is the U.K. GDPR?

I understand that the DPA implemented the GDPR in British law as an act of Parliament. Then there was Brexit, and the U.K. GDPR was introduced to stand in for the no longer binding EU GDPR, with only ...
4 votes
1 answer
964 views

Is it a breach of GDPR and DPA to say a colleague is sick and off work?

This is a hypothetical question. Suppose a customer calls asking for a colleague, call her Alice, and Bob answers the phone and tells the customer that Alice is off sick with the flu. The customer ...
-1 votes
1 answer
36 views

Restricting processing of data provided to police

Suppose that a person A would like to report a crime of which they’ve become a victim, to the police. For this purpose the police typically require the victim’s date of birth in order to create a ...
1 vote
2 answers
82 views

Is the local presence of a foreign non-GDPR state a data controller subject to the provisions of the Data Protection Act 2018?

Consider that state X is not subject to the gdpr, however, it has a diplomatic presence in the UK. If the state were a tech company that operated in or even simply offered services to people in, the ...