Questions tagged [data-protection]

For questions about the legal obligations of protecting data (personal or otherwise) and the consequences of failing to do so.

Filter by
Sorted by
Tagged with
13
votes
3answers
8k views

Facebook vs GDPR - Private Messages I sent to others will never be deleted/erased from Facebook servers

I asked this question to Facebook: I would like to know how can I permanently delete private messages from both sides of the conversation. For example, conversations I had in the past with ...
9
votes
2answers
4k views

Is hash of a username still personal data?

I create a script, which asks a user who upload a GIF to a social media website, if it can reupload it to another website (to reduce other users' internet usage). Now I want to give users an option to ...
6
votes
1answer
1k views

Resellers under GDPR - disclosure of data processors or countries of data storage?

A significant number of web-design and I.T. consultancy companies typically re-sell third party services related to their own as part of their product/service portfolio, to give a few examples, ...
0
votes
1answer
141 views

I emailed a law and data privacy professor regarding an issue I was having to do with internet privacy law. Will I get in legal trouble for this?

I emailed an American law and data privacy professor to ask to help explain whether google could reveal my information if a court order was taken out to identify me. I was very over emotional in the ...
9
votes
2answers
2k views

GDPR. Where to store users consent?

A pretty straightforward question, I think. When it comes to holding records that users consent has been provided, I can only imagine I would use some sort of php code to store data/records into .txt ...
5
votes
1answer
1k views

Germany: Does a github.io hosted site require imprint / data privacy statement according to the GDPR?

github offers free publicly accessible data storage. Many people use that to present their personal profile where they e.g. advertise for freelancing services. An example url could be http://username....
5
votes
1answer
2k views

How does the GDPR apply to software developed by one company and used by another?

Question I work for a bespoke software development company and I've been doing a lot of reading about the GDPR before it comes into force next year. A lot of it makes sense, however I'm really ...
4
votes
2answers
152 views

Is it illegal to continue using oAuth tokens after a user asks to remove them?

We have an app that allows users to connect their CRM. The CEO wants to "fool" users into making them believe that they can delete the OAuth tokens so that we don't have access to their data anymore....
4
votes
1answer
779 views

GDPR Legislation and user invites by email

I want to understand what the implications are for user emails with the onset of GDPR. It's a bit of a strange question but here is the scenario. We run a Software as a Service platform when a user ...
4
votes
1answer
279 views

For HIPAA, Does US Patient Data Have To Stay On US Servers?

For an application that stores US patient data, does HIPAA require that US data stays on US servers?
0
votes
1answer
68 views

Is Google obliged to obtain consent for the processing of searches for anonymous searches under the GDPR?

If you do not register a personal account for Google, thereby not giving specific and informed consent for the processing of your personal data, are Google still obliged to obtain consent for the ...
-2
votes
1answer
182 views

Will a court order be taken out for this? Could the FBI get involved in something like this? [closed]

I had 3 gmail accounts (where I had the same generic random first name and other words and random letters that I was made to put in to get them). None of them contained no personal information of mine....