Questions tagged [data-protection]
For questions about the legal obligations of protecting data (personal or otherwise) and the consequences of failing to do so.
35
questions with no upvoted or accepted answers
3
votes
0
answers
78
views
When targeting EU digital markets, is it enough to be GDPR compliant, or does one need to check the privacy laws of each EU country separately?
When targeting EU digital markets, is it enough to be GDPR compliant with regards to data privacy, or does one need to check the privacy laws of each EU country separately?
There exists an argument ...
- 131
2
votes
0
answers
32
views
Does article 8 of the European Convention protect against the dissemination of sensitive information about a research subject in scientific research?
I have a couple of questions related to the scope of Article 8(1) of the European Convention on Human Rights and who can be responsible for infringements in the rights outlined in the article. My ...
- 21
2
votes
0
answers
44
views
Search engine data breaches, osint
Such a search engine that is deliberately created for the purpose of collecting open source information about security related incidents including data breaches and including a link to the source that ...
- 43
2
votes
0
answers
77
views
Is there anything to stop a subject access requester from being barred by a business?
A an access requester requests security footage of themselves from a business B. B services their request by providing the footage. But then wishes not to serve them again in the future. Is this ...
- 9,295
2
votes
1
answer
131
views
What exactly triggers the GDPR Article 14?
Article 14 of the GDPR concerns the requirement for a data controller to inform the data subject when they obtain personal data has been obtained from an entity that is not the data subject:
Art. 14 ...
- 5,908
2
votes
0
answers
65
views
Could a cell phone carrier sell this privacy plan?
Suppose Verizon offered a "privacy plan" (e.g., for $50 extra per month) in which they intentionally delete any location/ping/connection/dialing history data from their servers/towers such ...
- 939
2
votes
0
answers
62
views
GDPR data deletion: can I ask the company to delete the data it had exported in the United States?
I am located in Italy.
I have subscribed to a service and provided some PII that "could be exported in the United States".
If I send a GDPR request to delete my data, can I ask them to also ...
- 1,596
2
votes
0
answers
54
views
GDPR data deletion: do I have a right to have the company specify which data it retained and why?
I requested the DPO of a company to delete all my data under GDPR.
After a step of "account ownership" verification, it replied that:
XXXX has deleted all of your personal data except where ...
- 1,596
2
votes
0
answers
367
views
Explanations for GDPR if no personal data is collected?
I have a website that is a travel search engine and I am very concerned about GDPR.
I am not interested in any private information from the users for marketing or such things. I just use Google ...
- 121
2
votes
0
answers
69
views
GDPR - Right of Access From Processor
If my organisation is processing data on behalf of a controller, does the data subject have access rights through the processor, or must Subject Access Requests (SARs) go through the controller?
If ...
2
votes
1
answer
352
views
What damages could one claim in a data breach, if the data was not subsequently used fraudulently?
Equifax recently announced they suffered a very large data breach, allegedly affecting almost half of all people in the United States. It's expected that lawsuits against Equifax will be popping up ...
user3580
1
vote
0
answers
72
views
What data protection law was broken by Alison Rose lying about the reason for closing Nigel Farage’s bank accounts?
The former NatWest chief executive Alison Rose spoke to a BBC journalist about the planned closure of Nigel Farage’s bank accounts. It is in the news today that the ICO has said in a report said that ...
- 5,908
1
vote
1
answer
58
views
What is the likely penalty for an organisation failing to comply with a subject access request by many months, on the 1st, 2nd, and 3rd occasions?
ACME Inc. Receives a subject access request from Bob, and fails to respond to it for 5 months. What are the likely sanctions faced by ACME, in case this was the:
1st,
2nd,
or 3rd
Such incident of ...
- 9,295
1
vote
0
answers
63
views
Receive written confirmation about non-breached data
Context:
I am working for an institution which has recently suffered a data breach.
There have also been articles in local press regarding the nature of the leaked data and claims about having access ...
- 153
1
vote
0
answers
32
views
A question about the Rehabilitation of Offenders Act. UK
Suppose I get an offer to study a PhD, and in the application procedure I was not asked about a criminal record at all. According to the rehabilitation of offenders, I can choose to withhold my ...
- 155
1
vote
0
answers
74
views
Can Bob, as the client, share any information about his project in any way he wants?
Bob hires vendor A and vendor B independently to work on a project for Bob. The two vendors are not partners, they work independently and do not communicate with each other although they are aware of ...
- 348
1
vote
0
answers
135
views
Is YouTube legally required to not allow "Made For Kids" videos to be added to playlists?
In the last few years YouTube introduced a Made For Kids classification for videos, which requires uploaders to state whether a given video is made for children, in which case certain features are ...
- 211
1
vote
0
answers
174
views
Mendeley is encrypting my data on my hard disk with a key only available to them: can I ask for unencrypted data under GDPR?
I use Mendeley Desktop to manage my bibliography. Now I want to switch to Zotero.
Zotero used to be able to import the Mandeley's database. However, Mendeley 1.19 encrypted my data on my HDD with a ...
- 1,596
1
vote
0
answers
47
views
CPA leaked tax return details
A CPA that is supposedly working on my Tax application accidentally has uploaded some other people tax applications to my account on their "secured" platform.
Now I am very worried that they ...
- 11
1
vote
0
answers
31
views
Liability for data when reselling used data storage (US)
If I purchase used storage media from a company, what is my liability for the data that it may contain?
As a standard practice, all such media would be wiped. However, secure data destruction is not ...
- 111
1
vote
0
answers
423
views
Encryption export compliance document in iOS app store
I am using encrypted core data (a wrapper of sqlcipher for core data) in my application in order to encrypt the database, and later before submitting the app to the appstore, I happened to notice that ...
- 121
1
vote
1
answer
118
views
Can my employer gather personal data without written consent
I'm located in the EU.
My employer recently became a contractor for an american company. We deal with software.
A requirement of the american company was that on all machine of the people working ...
- 11
0
votes
0
answers
473
views
GDPR implications of email sent to a misconfigured host
I sent an email to a website's contact and my mailserver received this error:
<...@...>: host ....mail.protection.outlook.com[104.47.70.110] said:
451 4.4.4 Mail received as unauthenticated, ...
- 103
0
votes
0
answers
13
views
Can a B2B outbound sales lead generation company legally capture and sell publicly available information without the consent of the leads?
I am researching the business model of a B2B outbound sales lead generation company that captures publicly available information for professionals such as name, company email, LinkedIn, Twitter, ...
0
votes
0
answers
16
views
Is there a legal context regarding non-personal data retention for older SAS clients? [EU]
Can EU based SAS company keep non-personal data that what created by an former EU-based client (for example blog posts/)?
If yes for how long?
- 137
0
votes
0
answers
43
views
Is my app's displaying of email IDs illegal from a data privacy perspective?
I am building an app that will easily help connect Spotify playlist curators with artists who are trying to promote their music. As part of this, i would like my app to display names and business ...
- 1
0
votes
0
answers
69
views
Is it illegal to allow a minor to participate in a site satisfaction survey?
Consider some imaginary website, run by a US legal entity - let's call it Whack Stove Reflow - has registered users, some of whom are under 18. This imaginary website wants to take a community ...
- 602
0
votes
0
answers
42
views
Is [company] breaching any data protection legislation in Canada needing my wife's details to authenticate MY account?
I created an online account in my name with a large Canadian retailer. My wife enters her credit card details to pay for the shopping. When I log in to the website it greets me with my name.
When I ...
0
votes
0
answers
54
views
If a user of my site gives me info of a third party they claim to be affiliated with, am I allowed to contact that third party to check?
I am developing an app where a part of the on-boarding process requires users to enter the email / company name of the agency that they are affiliated with (the 3rd party). I need to confirm that they ...
- 109
0
votes
0
answers
93
views
Facebook vs GDPR - Is Facebook never deleting the Searches you do?
I frequently delete the Search History from my account's Activity Log.
However, every time I start typing in Search, Facebook seems to remember perfectly searches I've done in the past.
Suggestions ...
- 1,003
0
votes
0
answers
217
views
Requesting Proof of Data Deletion
This questions covers the law and tech.
If I delete my account at Facebook or any company with a website service, can I ask to be provided proof of data having been deleted in some form provided by ...
- 101
0
votes
0
answers
39
views
Does data protection apply under a power of attorney relationship?
I have hired a relocation company to help me with dealing with the immigration office and I have signed a power of attorney so that they can visit the authorities and get feedback on my application on ...
- 113
0
votes
0
answers
45
views
Data Privacy: Should a user be allowed to change another users profile information?
In a SaaS platform, should users be allowed to change other users profile information (things like Name, Gender, Company they work for etc)?
What laws (US & EU) would give guidance either way? ...
- 1
0
votes
0
answers
49
views
Question Regarding GDPR
I have a question regarding The General Data Protection Regulation 2016/679 in European law and I'm not even sure this is the right place to ask, but I'll ask anyway as I'm stuck on where to find this ...
- 11
0
votes
0
answers
34
views
Does right to Data Access request /GDPR supersede restrictions in Employment contract of previous employer
Does right to Data Access request /GDPR supersede restrictions in Employment contract of previous employer ?
Is above fundamental right's affected by
Clauses in temporary employment contract like '...
- 37