Questions tagged [data-protection]

For questions about the legal obligations of protecting data (personal or otherwise) and the consequences of failing to do so.

26 questions with no upvoted or accepted answers
Filter by
Sorted by
Tagged with
2
votes
1answer
109 views

Public WiFi - when do you have to delete stored user data?

Note: I originally thought of this for germany, but if you have examples from other countries those are also welcome, since im interested in the topic in general. So lets say im using a public WiFi, ...
2
votes
0answers
31 views

GDPR which practice is compliant?

I have seen many ways of requiring user acceptance of their data usage on the internet. Which are conforming? Keep in mind I am talking just about the consent acquiring mechanism. In order from the ...
2
votes
0answers
329 views

Explanations for GDPR if no personal data is collected?

I have a website that is a travel search engine and I am very concerned about GDPR. I am not interested in any private information from the users for marketing or such things. I just use Google ...
2
votes
0answers
64 views

GDPR - Right of Access From Processor

If my organisation is processing data on behalf of a controller, does the data subject have access rights through the processor, or must Subject Access Requests (SARs) go through the controller? If ...
2
votes
1answer
339 views

What damages could one claim in a data breach, if the data was not subsequently used fraudulently?

Equifax recently announced they suffered a very large data breach, allegedly affecting almost half of all people in the United States. It's expected that lawsuits against Equifax will be popping up ...
1
vote
0answers
28 views

GDPR data deletion: can I ask the company to delete the data it had exported in the United States?

I am located in Italy. I have subscribed to a service and provided some PII that "could be exported in the United States". If I send a GDPR request to delete my data, can I ask them to also ...
1
vote
0answers
31 views

GDPR data deletion: do I have a right to have the company specify which data it retained and why?

I requested the DPO of a company to delete all my data under GDPR. After a step of "account ownership" verification, it replied that: XXXX has deleted all of your personal data except where ...
1
vote
0answers
75 views

Mendeley is encrypting my data on my hard disk with a key only available to them: can I ask for unencrypted data under GDPR?

I use Mendeley Desktop to manage my bibliography. Now I want to switch to Zotero. Zotero used to be able to import the Mandeley's database. However, Mendeley 1.19 encrypted my data on my HDD with a ...
1
vote
0answers
42 views

CPA leaked tax return details

A CPA that is supposedly working on my Tax application accidentally has uploaded some other people tax applications to my account on their "secured" platform. Now I am very worried that they ...
1
vote
1answer
199 views

Hypothetical question about Whistleblower Protection

Let's say a US non-government employment comes in contact with very sensitive unprotected information on the web. The information was gathered using opsint (Open Source Intelligence) there was no ...
1
vote
0answers
48 views

Question Regarding GDPR

I have a question regarding The General Data Protection Regulation 2016/679 in European law and I'm not even sure this is the right place to ask, but I'll ask anyway as I'm stuck on where to find this ...
1
vote
1answer
83 views

United States HIPAA and New Zealand HISO from outside these countries

We are developing a software product for storing and managing health records in Australia, with the software product primarily targeted towards Australian healthcare organisations. This requires us to ...
1
vote
0answers
29 views

Liability for data when reselling used data storage (US)

If I purchase used storage media from a company, what is my liability for the data that it may contain? As a standard practice, all such media would be wiped. However, secure data destruction is not ...
1
vote
0answers
315 views

Encryption export compliance document in iOS app store

I am using encrypted core data (a wrapper of sqlcipher for core data) in my application in order to encrypt the database, and later before submitting the app to the appstore, I happened to notice that ...
1
vote
0answers
88 views

Data Protection - Data removal request

A UK-based recruitment website focusing specifically on the technology industry has somehow obtained a copy of LinkedIn's public profile database and are hosting it on their own website as if it were ...
1
vote
1answer
105 views

Can my employer gather personal data without written consent

I'm located in the EU. My employer recently became a contractor for an american company. We deal with software. A requirement of the american company was that on all machine of the people working ...
0
votes
0answers
16 views

Collecting consent for online surveys in the UK

Where/what are the laws pertinent to collecting consent from participants before they can participate in an online user study? The most official ting I've found so far is this gov.uk guidance, but it ...
0
votes
0answers
51 views

If a user of my site gives me info of a third party they claim to be affiliated with, am I allowed to contact that third party to check?

I am developing an app where a part of the on-boarding process requires users to enter the email / company name of the agency that they are affiliated with (the 3rd party). I need to confirm that they ...
0
votes
0answers
35 views

Face generation using AI

Given how advanced AI has become, I was wondering about the legalities of stuff that it is being used for. I came across https://www.rosebud.ai/ a few days ago. To summarize, it is a service where ...
0
votes
2answers
77 views

What is the law regarding web/mobile applications and “personal” data?

I'm developing an application for mobile/web/desktop that will (in very watered down basic terms) store free text strings they've self-contributed and access them freely. As it stands, these ...
0
votes
0answers
74 views

Facebook vs GDPR - Is Facebook never deleting the Searches you do?

I frequently delete the Search History from my account's Activity Log. However, every time I start typing in Search, Facebook seems to remember perfectly searches I've done in the past. Suggestions ...
0
votes
0answers
92 views

Requesting Proof of Data Deletion

This questions covers the law and tech. If I delete my account at Facebook or any company with a website service, can I ask to be provided proof of data having been deleted in some form provided by ...
0
votes
0answers
39 views

Does data protection apply under a power of attorney relationship?

I have hired a relocation company to help me with dealing with the immigration office and I have signed a power of attorney so that they can visit the authorities and get feedback on my application on ...
0
votes
0answers
37 views

Data Privacy: Should a user be allowed to change another users profile information?

In a SaaS platform, should users be allowed to change other users profile information (things like Name, Gender, Company they work for etc)? What laws (US & EU) would give guidance either way? ...
0
votes
0answers
32 views

Does right to Data Access request /GDPR supersede restrictions in Employment contract of previous employer

Does right to Data Access request /GDPR supersede restrictions in Employment contract of previous employer ? Is above fundamental right's affected by Clauses in temporary employment contract like '...
-1
votes
0answers
14 views

International Proxy Shopping and KYC regulations

As I am about to graduate from college, some might say I am starting a new chapter of my life. And so far that chapter has involved exploring a lot of personal finance options. In this process I have ...