All Questions
Tagged with encryption gdpr
11 questions
-2
votes
1
answer
177
views
Is the company still a GDPR data controller if all data is end-to-end encrypted? [closed]
When developing an application which requires some personal data to function, a good thing to do, from a security and integrity perspective, is to minimise the amount of user data one gets access to. ...
- 107
0
votes
1
answer
121
views
GDPR and Personal Data Encryption
Suppose we have some user's personal data, that we have to encrypt and store in a database.
I've read this would technically not be a breach of personal data, since the attacker would only have ...
15
votes
2
answers
6k
views
Does GDPR apply if my web app stores personal data on the user's phone only?
My web app stores personal data about the user, but on the user's phone only (HTML5 Local Storage). The data is never touched by any server or database. I can't see the data. My server can't see the ...
- 253
4
votes
2
answers
1k
views
If a company actively and knowingly displays user passwords to their staff, is it breaking GDPR laws?
I used to work for a company, where they have a team of moderators, who actively monitor which accounts are scammers etc. To monitor this they can find links between user accounts via a users password,...
- 43
0
votes
1
answer
334
views
Is client-side encrypted data really personal data
Scenario: My service that is storing customer files is hosted on my own personal physical server, “on-prem”. It is then using one of the popular cloud storage services (Azure blob storage, AWS S3) to ...
- 1
0
votes
1
answer
210
views
Was Mendeley really compelled by GDPR to encrypt my database?
Mendeley 1.19 encrypted my data on my HDD with a key that only Mendeley has.
On Twitter Mendeley claimed that:
To comply with GDPR & keep your data safe, Mendeley has encrypted your
databases. ...
- 1,636
1
vote
0
answers
181
views
Mendeley is encrypting my data on my hard disk with a key only available to them: can I ask for unencrypted data under GDPR?
I use Mendeley Desktop to manage my bibliography. Now I want to switch to Zotero.
Zotero used to be able to import the Mandeley's database. However, Mendeley 1.19 encrypted my data on my HDD with a ...
- 1,636
1
vote
1
answer
166
views
What to answer to a GDPR-related user request about his data if it is fully encryped and only the user has the private key for decryption
We wrote an App where private data can be sent from one phone to another phone one by temporarily storing the encrypted data file on our database server. The data file will sit there for less than a ...
- 1,388
22
votes
1
answer
6k
views
Am I obligated to decrypt lots of data for GDPR requests?
I am providing a B2B service where customer data of businesses are stored in an SQL table.
As I never need to query for this personal data, the data at rest there is asymmetrically encrypted with the ...
- 323
1
vote
3
answers
223
views
Does GDPR apply to personal information entered in a password-field?
If someone enters personal data in a field which purpose is not to handle personal data, does GDPR apply?
For example if someone enters their email, phone number or name in a password-field? If so, ...
- 121
8
votes
1
answer
2k
views
Is throw-away-the-key-encryption allowed under GDPR?
Article 15 of the GDPR says:
The data subject shall have the right to obtain [...] personal data [if it is being "processed"]
Article 4 says that "processing" includes storage.
Therefore, all ...
- 183