Questions tagged [data-storage]
The data-storage tag has no usage guidance.
44
questions
1
vote
3answers
59 views
Does GDPR apply to personal information entered in a password-field?
If someone enters personal data in a field which purpose is not to handle personal data, does GDPR apply?
For example if someone enters their email, phone number or name in a password-field? If so, ...
0
votes
2answers
33 views
Storing chat messages in a private database with user consent
The Situation
I am currently creating a Telegram bot for me and some friends that stores all chat messages we send in our group chat in a database so that we can retrieve advanced chat statistics. I ...
0
votes
2answers
49 views
GDPR: can we ask the building owner to share and/or destroy data about one's RFID activity?
this is a follow up of https://security.stackexchange.com/questions/84184/do-rfid-key-cards-track-the-user-through-entry-ways
It seems most buildings store the activity of one's RFID key activity.
...
1
vote
0answers
18 views
Server based music player for personal music
Is it legal to create saas application where users could upload own music on server storage which they would get with service and then use app for playing that music via streaming. Users could not ...
6
votes
1answer
923 views
Is it okay to store user locations?
I know it might sound quite bad. But here I explain the whole situation.
I'm developing a mobile application based on visiting different places. And I would store in some database (surely AWS) all ...
1
vote
0answers
29 views
Liability for data when reselling used data storage (US)
If I purchase used storage media from a company, what is my liability for the data that it may contain?
As a standard practice, all such media would be wiped. However, secure data destruction is not ...
1
vote
0answers
14 views
Datamodel transfer between two database technologies
As a purchaser of an application program with an associated database, may I transfer the structure of this database (tables, attributes, links, ...) to another database technology without conflicting ...
1
vote
1answer
105 views
Is one liable if illegal material is found on one's own server?
This question was prompted by a news article I read earlier today, in which a person described the dilemma they faced on discovering illegal material had been stored by an unidentified third party on ...
2
votes
1answer
55 views
Under what conditions can an Asian company access Database hosted by a British company containing data of European citizens?
I work for a small non-EU company1 on projects of a British company2 which rents out houses.
All the live databases3 are located in the UK on their premises and we access those databases and servers ...
0
votes
1answer
316 views
GDPR and local data storage in mobile app
Let's say that I have a mobile app that tracks the user and saves his GPS coordinates locally only on a mobile device so that he can check where he was. The mobile application does not send this data ...
3
votes
1answer
160 views
Should email addresses be anonymized/pseudonymized under GDPR?
GDPR states recommendation to pseudonymise or even anonymise Personal Data. A lot — most of — web sites and services require email address on signup.
Should, from the Data Controller's point of view, ...
0
votes
1answer
56 views
Can I share IP adresses of machine who attempted logins?
I started a small experiment. I put up a few servers on digital ocean and I started logging all the failed login attempts. They were numerable.
The dataset after a week is a fun one to play with. I'...
1
vote
1answer
34 views
Privacy Policy for email contact form
I'm building a web page that does not have any sort of registration/login. The only bit of user data is a contact form that allows the user to contact the owners of the page.
This contact form asks ...
0
votes
1answer
76 views
Can a U.S. business store mail on a server outside the U.S.?
If you are a business incorporated/registered in the US, is it currently (Feb. 28 2018) legal to store emails on mail servers outside the US?
4
votes
1answer
82 views
For HIPAA, Does US Patient Data Have To Stay On US Servers?
For an application that stores US patient data, does HIPAA require that US data stays on US servers?
1
vote
0answers
54 views
Can app manufacturers collect and store minors' data?
United States/New York State here, but I'm interested in any answers, even generic ones that are jurisdiction-agnostic.
I am a software developer writing a hobby app (both Android and iOS) for a ...
1
vote
0answers
70 views
Are data processors allowed to locally store live customer information for testing GDPR
We develop software for another company and use their live data to test our applications locally before they go live. This means we keep live customer information on office computers.
Will this be ...
4
votes
2answers
2k views
Does any host provider currently comply with GDPR?
According to Rec.81; Art.28(1)-(3) of the GDPR regulation,
"The carrying-out of processing by a processor should be governed by a contract or other legal act under Union or Member State law, binding ...
-1
votes
1answer
68 views
Cloud providers and proprietary data
I have read the terms and conditions of my cloud service and they "reserve the right to monitor abusive or offensive usage", but I would like to know if they can spy on my proprietary data and use or ...
0
votes
2answers
1k views
It is legal for Grammarly to read, share and store forever all my emails?
I have just noticed the following paragraph in Grammarly Terms and Conditions.
By uploading or entering any User Content, you give Grammarly (and
those it works with) a nonexclusive, worldwide, ...
0
votes
1answer
248 views
Is Encrypted Intellectual Property still considered Intellectual Property?
TL;DR I posted a question yesterday; the answer to which gave me a new question:
Is Encrypted Intellectual Property still considered Intellectual Property in most (or, relevant) cases?
Here's some ...
1
vote
1answer
46 views
Which, if any, data protection laws apply?
I am the DBA (Database Administrator) of an online group. We store a few bits of personal data for our members. Name, Age, Email. Nothing huge. The rest of the data is specific to our group.
I don't ...
1
vote
2answers
572 views
Is scraping a database by an undocumented API endpoint illegal?
Simple question: I want to get specific data, but the API does not have the endpoint I want, so what I want to do is scrape the database for the resources and then use my own filtering to retrieve and ...
0
votes
1answer
964 views
What is the retention periods for employees data in Germany?
Being concerned by my privacy and the data held by my former employers, I am wondering how long German companies can keep data about their employees?
The question is quite open on purpose, since I ...
1
vote
3answers
918 views
Legality of data “chunking” concerning child pornography
Recently, I've become interested in distributed, peer-to-peer (p2p) file sharing, including BitTorrent (en.wikipedia.org/wiki/BitTorrent) and the InterPlanetary File System (ipfs.io) (IPFS). This ...
2
votes
1answer
554 views
What is the legal status of data (intentionally deleted or not) on a second-hand computer?
If a person purchases a second-hand computer, and the seller has not wiped the hard drives of that computer before the sale, is it legal for the buyer to access the data on it?
Alternatively, if the ...
1
vote
1answer
1k views
Is it legal to scrape a website and create my own database?
I'm working on a website that needs a database which is available publically on another site (let's just says it is IMDB). It'd be great if I could create my database by scraping IMDB. It'll be a one-...
0
votes
1answer
95 views
Legal jurisdiction over cloud storage
I work on software that is a project of an encrypted cloud, created to protect users privacy.
We use a javascript crypto library called SJCL.
Only the user has the decryption key. That means only ...
2
votes
2answers
89 views
Who (according to the law) is allowed to access confidential information?
Take the following scenario,
I own an institution and have recently employed a system which involves a questionnaire/feedback form which gives the new starters the ability to give feedback on their ...
0
votes
1answer
826 views
Is it legal to use Web crawler for data gathering?
I live in Uk, I am programmer and I have built a personal system that goes to some foreign housing web sites and extracts data from adverts going add by add (using crawler/scraper/web spider), I then ...
3
votes
0answers
143 views
Need computer forensic case citation (urgent)
My mother is about to attend court over a car which was written off by a lorry.
The CCTV video recording of the accident was mishandled, such as the storage SD card not being imaged, it was also ...
3
votes
1answer
971 views
It is legal to save and index a copy of any leaked database?
I'm wondering if it is legal to use a copy of a leaked database like the leaked Adobe database containing email addresses, encrypted passwords and password hints.
I can imagine it won't be legal to ...
1
vote
1answer
35 views
Are there any resources for creating terms and conditions for websites?
I am currently on the process of making a forum based website that will contain users emails, passwords and possibly names. When The users signs up they will need to accept the terms and conditions ...
2
votes
1answer
65 views
Using U.S. hosting service from Europe
I was reading about data transfer implications for those of us who live in EU. Apparently transferring any user's personal info outside of EU is not strictly legal, unless you go through some ...
2
votes
0answers
41 views
Russian data sovereignty compliance
So there's new law requiring a copy of personal data of Russian citizens in effect since September 2015. I can't read Russian, and Western press in languages I can read is a little vague on the actual ...
0
votes
1answer
37 views
Why was the data retention period for auditable records in Sarbanes-Oxley chosen as 7 years?
In Sarbanes-Oxley, does anyone know why the figure of 7 years was chosen as the data retention period (and not, say, 6 or 8 years)?
2
votes
1answer
115 views
Can communication companies simply decline to record communication data?
I understand that companies that involve digital communications can, at least in the US, be forced to hand over communication data in specific contexts.
But storing so much data must be highly ...
3
votes
1answer
193 views
(UK) Data Protection Act - Deleting offline data
I have a question regarding the Data Protection Act and the deletion of users private information. If a website was running a weekly backup of users private data (name, date of birth, address etc.) ...
0
votes
1answer
304 views
Is it legal to collect data as a UK company that operates a US server?
I'm a little confused with how the safe harbour law works out.
Related article: http://www.bbc.co.uk/news/technology-35471851
How does this law affect UK businesses that operate an external server ...
1
vote
0answers
21 views
Data Protection of data is shared
i am not sure if I posting in the correct place and i will delete if not.
I have been asked by my boss how long do we have to keep customer data for?
He is a retailer and fixes computers.
A customer ...
4
votes
1answer
122 views
Storing pirated data online who is responsible?
If I were to set up an online storage company and sell GB/TB who would be responsible for my customers uploading pirated/illegal data on my storage servers? Would declaring in the terms and ...
2
votes
1answer
52 views
Is there a legal requirement for my hosting service to provide me with a copy/backup of my content?
If I have a provider hosting a forum service, and I want a copy of my forum database (actually to move to another service) is there a requirement that they must be able to provide me with my content ...
2
votes
1answer
168 views
Data Chain Of Custody
This is civil in the US. I work for a company that does litigation support - discovery. We have secure servers that we (the company) pay a lot of money for. Based on the case load we may need to ...
3
votes
4answers
458 views
Am I allowed to store data of EU citizens as an Indian company?
We are a company based in India and are frequently being visited by people from overseas.
Due to the recent safe harbour developments, are we allowed store data of EU-citizens on a cloud server ...
