Questions tagged [data-storage]

The tag has no usage guidance.

Filter by
Sorted by
Tagged with
4 votes
1 answer
98 views

How does GDPR's right to erasure apply to deduplicated storage?

I am trying to understand GDPR's right to erasure (and principle of storage limitation) in the following case: Company A offers a online data storage service that is intended to be used by the users ...
Tomas's user avatar
  • 43
0 votes
2 answers
47 views

Official source for Data Export legislation (UK)

I need to find an official source for "Data Export" legislation that applies within the UK, I have searched the .GOV websites and found various pages that refer to physical item (military ...
Darkcat Studios's user avatar
-1 votes
1 answer
62 views

Choosing region for database to be US / EU compliant

I wanted to ask about how one should go about choosing region for database / cloud provider when working on an application that stores user data for EU and US customers. Business behind the app is a ...
Ilja's user avatar
  • 101
0 votes
2 answers
131 views

Can a mobile app save data about a user without a user giving the permission?

Is it allowed to store a user id to remember him, his settings, preferences and history, without asking for his permission? Is there anyknowledge about that how that goes with privacy laws like GDPR ...
Sir hennihau's user avatar
2 votes
1 answer
99 views

Is consent required for paying, corporate subscribers of a B2B website?

I was intrigued by this question: Why is the Google Analytics cookie defined as "strictly necessary" and saved without consent?, and how GDPR/E-Privacy applies to paying, corporate ...
Xinnabar's user avatar
0 votes
0 answers
73 views

Does FDA require Clinical Research Companies/labs required to use relational/non-relational databases to store or document clinical trial data?

Are American Clinical Research Companies or laboratories doing analysis for clinical trials required to use relational databases or non-relational databases or Relational Database Management Systems ...
Coo's user avatar
  • 315
1 vote
1 answer
242 views

Data backups, data loss, the GDPR right to be forgotten, and timing

This question concerns the timing of GDPR demands in regard to the "right to be forgotten", and data loss. I am considering creating a web app that allows users to play a game against one ...
Hammerite's user avatar
  • 125
0 votes
0 answers
43 views

Is my app's displaying of email IDs illegal from a data privacy perspective?

I am building an app that will easily help connect Spotify playlist curators with artists who are trying to promote their music. As part of this, i would like my app to display names and business ...
pmallepu's user avatar
0 votes
0 answers
69 views

Is it illegal to allow a minor to participate in a site satisfaction survey?

Consider some imaginary website, run by a US legal entity - let's call it Whack Stove Reflow - has registered users, some of whom are under 18. This imaginary website wants to take a community ...
einpoklum's user avatar
  • 602
0 votes
1 answer
259 views

How to comply with 18 USC 2257A

We want our app to comply with 18 USC 2257A, which states that (...) producers of pornography, or depictions of any sexual activity using actual people, are required to verify that the performers are ...
Alex's user avatar
  • 3
1 vote
1 answer
98 views

Making public/open-source datasets from royalty-free image sources

I am working on a small face-related dataset that will be publicly available for open research. I have looked into many copyright-free image sources like https://pikwizard.com/ and https://www.pexels....
Zabir Al Nazi's user avatar
1 vote
1 answer
66 views

Storing data from stock data feed provider like Yahoo! Finance or FMP Cloud

Suppose a developer creates a web application for stock market alerts and notifications. Is it legal to store data obtained from purchased subscription of data feed providers like Yahoo! Finance or ...
Pratik Charwad's user avatar
0 votes
1 answer
119 views

The Data ownership for an automated server running for years prior to GDPR Regulations

Let's go back to the early 2010's. A group of researchers get together to build a collaborative data repository. A server is set up to receive data for aggregation and processing from various ...
madprogramer's user avatar
2 votes
0 answers
62 views

GDPR data deletion: can I ask the company to delete the data it had exported in the United States?

I am located in Italy. I have subscribed to a service and provided some PII that "could be exported in the United States". If I send a GDPR request to delete my data, can I ask them to also ...
robertspierre's user avatar
1 vote
0 answers
173 views

Mendeley is encrypting my data on my hard disk with a key only available to them: can I ask for unencrypted data under GDPR?

I use Mendeley Desktop to manage my bibliography. Now I want to switch to Zotero. Zotero used to be able to import the Mandeley's database. However, Mendeley 1.19 encrypted my data on my HDD with a ...
robertspierre's user avatar
-1 votes
1 answer
72 views

Is requesting a customer database for testing purposes legal?

We're a company working in building industry and have a program, develeoped together with our software vendor, to create quotes and configurate products. The program uses a MS SQL database. It stores ...
user1673665's user avatar
2 votes
3 answers
83 views

Can cloud services providers be asked to turn over data from foreign countries?

Can cloud providers be asked to provide data from other countries to the government/law enforcement for security purposes? Can Amazon be asked to provide data from non-US countries for any security ...
heretoinfinity's user avatar
3 votes
1 answer
108 views

Automated backups of my clients websites to cloud storage, who is legally at fault if the backup contains illegal/copyrighted material?

I am currently working on a new backup service for all of my clients, where every day an automated system will take a copy of all of the website files, as well as a copy of the database. This will ...
no.'s user avatar
  • 131
13 votes
1 answer
4k views

Does the German GDPR require storing the data in a German datacenter for a tele-health company?

I co-founded a tele-health startup, we are expanding to Germany, we have gone through the GDPR, and implemented most of it, however, we didn't quite understand the data residency part and found ...
ali.bh's user avatar
  • 233
-1 votes
2 answers
143 views

As an individual, not a company, if I collect email addresses of visitors to my website, what gdpr regulations apply to me?

I'm planning on making a website to act as a CV / portfolio of my work as a software developer. I intend to lock this personal data behind a token based access system, so that it isn't available ...
Matt Fellows's user avatar
5 votes
1 answer
349 views

Deletion of personal data

I recently registered an account on an employment agency website. Had to provide my email address, a password and of course all of my personal data, including my complete professional background. ...
MrUpsidown's user avatar
2 votes
1 answer
204 views

Does the European Union allow to store medical (sensitive) data in cloud platforms such as Amazon Web Services or Google Cloud?

Does the EU allow to store patients medical data in cloud databases from providers such as Amazon Web Services or Google Cloud? What are the legal requirements? Can you point at some legal source ...
codependent's user avatar
0 votes
0 answers
213 views

Requesting Proof of Data Deletion

This questions covers the law and tech. If I delete my account at Facebook or any company with a website service, can I ask to be provided proof of data having been deleted in some form provided by ...
nick's user avatar
  • 101
7 votes
4 answers
6k views

My child's name is "Robert'); drop table *;--" Is he in trouble?

(Source: https://xkcd.com/327/) So with the upcoming birth of my first child, I suggested the name "Robert'); drop table *;--". While I was quickly told that wasn't going to happen, I have to wonder ...
Kommissar's user avatar
  • 189
4 votes
1 answer
186 views

Is it Illegal to shred Sheriff's department records in Georgia?

A recent New Yorker Article describes an incoming sheriff, replacing an old (corrupt) sheriff on his first day: "when he unlocked the doors to the sheriff’s office on his first day on the job, ...
Steve Sether's user avatar
1 vote
3 answers
162 views

Does GDPR apply to personal information entered in a password-field?

If someone enters personal data in a field which purpose is not to handle personal data, does GDPR apply? For example if someone enters their email, phone number or name in a password-field? If so, ...
Magnus's user avatar
  • 121
0 votes
2 answers
631 views

Storing chat messages in a private database with user consent

The Situation I am currently creating a Telegram bot for me and some friends that stores all chat messages we send in our group chat in a database so that we can retrieve advanced chat statistics. I ...
Snowfire's user avatar
0 votes
2 answers
73 views

GDPR: can we ask the building owner to share and/or destroy data about one's RFID activity?

this is a follow up of https://security.stackexchange.com/questions/84184/do-rfid-key-cards-track-the-user-through-entry-ways It seems most buildings store the activity of one's RFID key activity. ...
John's user avatar
  • 113
6 votes
1 answer
2k views

Is it okay to store user locations?

I know it might sound quite bad. But here I explain the whole situation. I'm developing a mobile application based on visiting different places. And I would store in some database (surely AWS) all ...
Sergi Mascaró's user avatar
1 vote
0 answers
31 views

Liability for data when reselling used data storage (US)

If I purchase used storage media from a company, what is my liability for the data that it may contain? As a standard practice, all such media would be wiped. However, secure data destruction is not ...
David Hamilton's user avatar
4 votes
1 answer
522 views

Is one liable if illegal material is found on one's own server?

This question was prompted by a news article I read earlier today, in which a person described the dilemma they faced on discovering illegal material had been stored by an unidentified third party on ...
Stilez's user avatar
  • 3,179
2 votes
1 answer
86 views

Under what conditions can an Asian company access Database hosted by a British company containing data of European citizens?

I work for a small non-EU company1 on projects of a British company2 which rents out houses. All the live databases3 are located in the UK on their premises and we access those databases and servers ...
EUTouchedMyBaguette's user avatar
1 vote
1 answer
901 views

GDPR and local data storage in mobile app

Let's say that I have a mobile app that tracks the user and saves his GPS coordinates locally only on a mobile device so that he can check where he was. The mobile application does not send this data ...
Leszek Szary's user avatar
3 votes
1 answer
496 views

Should email addresses be anonymized/pseudonymized under GDPR?

GDPR states recommendation to pseudonymise or even anonymise Personal Data. A lot — most of — web sites and services require email address on signup. Should, from the Data Controller's point of view, ...
Evgeniy Chekan's user avatar
0 votes
1 answer
69 views

Can I share IP adresses of machine who attempted logins?

I started a small experiment. I put up a few servers on digital ocean and I started logging all the failed login attempts. They were numerable. The dataset after a week is a fun one to play with. I'...
cantdutchthis's user avatar
1 vote
1 answer
73 views

Privacy Policy for email contact form

I'm building a web page that does not have any sort of registration/login. The only bit of user data is a contact form that allows the user to contact the owners of the page. This contact form asks ...
ShakMR's user avatar
  • 13
1 vote
1 answer
135 views

Can a U.S. business store mail on a server outside the U.S.?

If you are a business incorporated/registered in the US, is it currently (Feb. 28 2018) legal to store emails on mail servers outside the US?
M.K's user avatar
  • 11
4 votes
1 answer
686 views

For HIPAA, Does US Patient Data Have To Stay On US Servers?

For an application that stores US patient data, does HIPAA require that US data stays on US servers?
Ben Rei's user avatar
  • 41
1 vote
0 answers
65 views

Can app manufacturers collect and store minors' data?

United States/New York State here, but I'm interested in any answers, even generic ones that are jurisdiction-agnostic. I am a software developer writing a hobby app (both Android and iOS) for a ...
smeeb's user avatar
  • 377
4 votes
2 answers
2k views

Does any host provider currently comply with GDPR?

According to Rec.81; Art.28(1)-(3) of the GDPR regulation, "The carrying-out of processing by a processor should be governed by a contract or other legal act under Union or Member State law, binding ...
Nora Varner's user avatar
0 votes
1 answer
78 views

Cloud providers and proprietary data

I have read the terms and conditions of my cloud service and they "reserve the right to monitor abusive or offensive usage", but I would like to know if they can spy on my proprietary data and use or ...
mrauto's user avatar
  • 11
1 vote
2 answers
2k views

Is it legal for Grammarly to read, share and store forever all my emails?

I have just noticed the following paragraph in Grammarly Terms and Conditions. By uploading or entering any User Content, you give Grammarly (and those it works with) a nonexclusive, worldwide, ...
RyszardZ's user avatar
-1 votes
2 answers
400 views

Is Encrypted Intellectual Property still considered Intellectual Property?

TL;DR I posted a question yesterday; the answer to which gave me a new question: Is Encrypted Intellectual Property still considered Intellectual Property in most (or, relevant) cases? Here's some ...
Bango's user avatar
  • 127
1 vote
1 answer
56 views

Which, if any, data protection laws apply?

I am the DBA (Database Administrator) of an online group. We store a few bits of personal data for our members. Name, Age, Email. Nothing huge. The rest of the data is specific to our group. I don't ...
bowman762's user avatar
1 vote
2 answers
1k views

Is scraping a database by an undocumented API endpoint illegal?

Simple question: I want to get specific data, but the API does not have the endpoint I want, so what I want to do is scrape the database for the resources and then use my own filtering to retrieve and ...
Vuurwarm's user avatar
0 votes
1 answer
2k views

What is the retention periods for employees data in Germany?

Being concerned by my privacy and the data held by my former employers, I am wondering how long German companies can keep data about their employees? The question is quite open on purpose, since I ...
brclz's user avatar
  • 248
3 votes
3 answers
2k views

Legality of data "chunking" concerning child pornography

Recently, I've become interested in distributed, peer-to-peer (p2p) file sharing, including BitTorrent (en.wikipedia.org/wiki/BitTorrent) and the InterPlanetary File System (ipfs.io) (IPFS). This ...
AniSkywalker's user avatar
2 votes
1 answer
2k views

What is the legal status of data (intentionally deleted or not) on a second-hand computer?

If a person purchases a second-hand computer, and the seller has not wiped the hard drives of that computer before the sale, is it legal for the buyer to access the data on it? Alternatively, if the ...
LivingInformation's user avatar
1 vote
1 answer
2k views

Is it legal to scrape a website and create my own database?

I'm working on a website that needs a database which is available publically on another site (let's just says it is IMDB). It'd be great if I could create my database by scraping IMDB. It'll be a one-...
user avatar
1 vote
1 answer
101 views

Legal jurisdiction over cloud storage

I work on software that is a project of an encrypted cloud, created to protect users privacy. We use a javascript crypto library called SJCL. Only the user has the decryption key. That means only ...
Muonium's user avatar
  • 11