Questions tagged [gdpr]
Questions about the European Union General Data Protection Regulation (GDPR)
520
questions
0
votes
0answers
9 views
GDPR and data deletion
My personal data has been misused for online job application at telecommunication provider. I have reported this to the telecom provider and they told they have removed my data.
At the same time, I ...
1
vote
3answers
48 views
Is offline-only processing a “‘processing” as understood by GDPR?
GDPR, article 4, point (1) states:
‘processing’ means any operation or set of operations which is
performed on personal data or on sets of personal data, whether or not
by automated means, such as ...
5
votes
1answer
80 views
Can a company charge you to update your address under GDPR?
I was just charged £30 (over the phone) to update my address with an insurance company. I didn't contest it at first and pulled out my wallet to pay the fee and did. However, while I was on the phone ...
3
votes
0answers
36 views
What is my responsibility related to GDPR as a Freelance developer
I'm a Software Engineer, and I've just taken my first "side gig" job in hopes of becoming Freelance one day. I'm based in the UK. My Client told me exactly what they want, and i've built it. ...
0
votes
2answers
50 views
Is it illegal to pre-check the email opt-in option for an html form?
Email opt-in and opt-out for online registration forms is subject to GDPR compliance rules.
However, I don't see any information out there about whether it is ok for an email opt-in checkbox to be pre-...
0
votes
0answers
42 views
If a user of my site gives me info of a third party they claim to be affiliated with, am I allowed to contact that third party to check?
I am developing an app where a part of the on-boarding process requires users to enter the email / company name of the agency that they are affiliated with (the 3rd party). I need to confirm that they ...
1
vote
1answer
56 views
Is it legal to post an email to social media if the email also contains a photo of the sender and other personal identifiable information?
I've seen a few similar questions asked before, however would posting a screenshot of an email onto social media be legal under the following circumstances:
The poster on social media is the ...
-1
votes
2answers
103 views
As an individual, not a company, if I collect email addresses of visitors to my website, what gdpr regulations apply to me?
I'm planning on making a website to act as a CV / portfolio of my work as a software developer. I intend to lock this personal data behind a token based access system, so that it isn't available ...
0
votes
1answer
33 views
Validity of automated GDPR subject access requests
If a software product was distributed that automated the creation and sending of GDPR subject access requests, do these request impose the same legal requirements on the data processor as if the ...
4
votes
2answers
424 views
GDPR: Is only a birthday personal identifiable information?
I wonder if only a birthday is seen as personal identifiable information according to the GDPR, so no usernames, passwords, emails, phone numbers are present in the system. Literally only a birthdate. ...
1
vote
1answer
44 views
Is storing only part(s) of an IP address compliant with the GDPR?
Let's say that ip address is something like xxx.52.114.191. Would be allowed to store into database 113.191? And let's say address is Nick Example, Some street 5, 33012 Florida, US. Would be allowed ...
1
vote
0answers
58 views
Is facebook in violation of CCPA if they don't delete all messenger messages when you delete your account?
It seems like Facebook won't delete your messages from the recipient's inbox when you delete your account. People send a lot of personal information in messages including their address, phone number, ...
-2
votes
2answers
33 views
Storing users data in database, which data is legal to store and how to store it?
I am developing a mobile application that will be pretty similar to Instagram. Now this app will be available for free and I will be offering it on the Stores as an individual not as a business. So ...
-1
votes
2answers
102 views
What legal conditions do I have to meet to open an open source website?
I'm working on a website for a pretty long time and in the close future I want to open it into the public. The problem is, my website collects personal data and cookies which (in my country - Poland) ...
0
votes
1answer
36 views
Is Google obliged to obtain consent for the processing of searches for anonymous searches under the GDPR?
If you do not register a personal account for Google, thereby not giving specific and informed consent for the processing of your personal data, are Google still obliged to obtain consent for the ...
3
votes
1answer
47 views
Why does Google require consent from users in order to process ads personalization data?
Recently, Google was fined under the GDPR by France's CNIL data protection authority. The authority found Google's processing of personal data for ads personalization lacked transparency, was ...
0
votes
1answer
30 views
What is the law regarding web/mobile applications and “personal” data?
I'm developing an application for mobile/web/desktop that will (in very watered down basic terms) store free text strings they've self-contributed and access them freely.
As it stands, these ...
0
votes
0answers
31 views
GDPR and contact tracing
Alice has a business relationship with Bob, which involves both keeping contact information and enough physical interaction to count as a contact. Charlie contacts Alice and requests Bobs contact ...
2
votes
1answer
40 views
GDPR/right of erasure and online marketplaces/payment platforms
I am in the early stages of designing an online marketplace platform for professional services. In the context of specifying what happens when a user hits the "delete account" button, I am considering ...
1
vote
1answer
60 views
GDPR - Personal data
I've read the definition of "personal data" and I still can't understand it clearly. For example I have a youtube account and create a comment, is this comment now considered my personal data? If that ...
1
vote
0answers
43 views
University diploma / various certificates under GDPR
Background: I'm considering building a web (focused to Europe) which, for one of it's part, would require users to upload their university diplomas and/or other similar certificates of achieved ...
1
vote
2answers
57 views
What consequences are there to ignoring GDPR rules as a non-EU entity?
If a non-EU entity ignores the GDPR rules, including not paying any fines they receive from not following them, what consequences are they subject to? Can a company simply decide to ignore GDPR rules ...
34
votes
2answers
5k views
How to store refusal of cookie consent
If a user refuses cookies on a website, then how can that website store that refusal? As far as I can tell, the GDPR requires you to store both consent to and refusal of personal data storage. But it ...
10
votes
2answers
1k views
To comply to GDPR, do social networks require to have a button to “Export your Data”?
Major social web services (such as Facebook, Instagram, Twitter, Microsoft and Google) have a page where you can click a button to export your data - posts, account data, login information, meta data, ...
0
votes
2answers
37 views
Are LoB apps for internal users required to comply with GDPR for work email addresses used in login?
In Europe, developing Android and iOS Apps, server backend hosted in Azure, on behalf of a customer. The Apps are line-of-business for internal users only, accepting sign-up/login as the work email ...
1
vote
1answer
63 views
Has a data loss taken place if, after the fact, it is discovered that the data was never lost
Data on external media was misplaced and all the protocols to report it as lost were followed.
A few months after, the media was discovered. It never left the secure location.
Given that data was ...
0
votes
2answers
113 views
Help figuring out GDPR and pseudonymisation
I have server that needs to identify returning visits from users. I'm trying to figure out what I can do and whether I'm supposed to ask for consent from the user.
I don't care who the actual user, ...
4
votes
1answer
218 views
Deletion of personal data
I recently registered an account on an employment agency website. Had to provide my email address, a password and of course all of my personal data, including my complete professional background.
...
5
votes
1answer
141 views
Is it GDPR-compliant to require *public* publishing of personal info as condition for access to a service?
Background: For roughly 2 decades I've run my own private email infrastructure for myself, open source projects, and a few other individuals over business internet service intended for such usage. I'...
0
votes
1answer
98 views
Is the ZIP Code allowed as part of a ordernumber
We have a Webshop and want to have the Customers ZIP Code within our Order Number.
Is this against the GDPR?
0
votes
0answers
25 views
Storing personal data in the cloud and sharing it to particular users
I'm a programming student working on an app which will allow people to create and manage their "teams". An essential feature is allowing youths to create their accounts.
My biggest concern are the ...
3
votes
2answers
58 views
Are there any HIPAA like technical requirements in EU for developing health related web software?
It looks like in the USA developers adhere to HIPAA standards when developing and hosting health-related software. But I can't find anything similar to the EU. GDPR is all about being transparent and ...
7
votes
2answers
1k views
Do family pictures and videos in public places fall under GDPR?
The Czech Data Protection Authority fined Mr. Rynes for filming
members of the public without their consent. Mr. Rynes appealed,
arguing that he was covered by the personal and household ...
1
vote
1answer
134 views
Covid tracking app, forcing citizen to install it on insecure devices
Here's the hypothetical scenario, which in some countries might not be hypothetical after all:
The app. Because of Covid-19, the government decides that some citizens must install an app on their ...
2
votes
2answers
44 views
GDPR compliance when people submit file with other's person personal data
I've published a tool on my website, allowing people to submit a CSV file for a transformation into a XML file according to a governmental XSD. I would like to add a functionality that would allow ...
1
vote
2answers
45 views
GDPR: Local encrypted database of non-identifiable information
There is a piece of software that has a database on my local computer. This database does not contain personally identifiable information but the contents are created by the user. However, this ...
2
votes
1answer
45 views
Is revision history (audit/change log) compliant with GDPR's right to rectification?
Assume, there's a model called CustomerDetails, which contains the following properties:
ContactEmail - an email address for contacting purposes,
ContactAddress - a postal address for contacting ...
4
votes
2answers
97 views
If I buy assets (inc customer data) from receiver of a UK company, how does GDPR apply?
I’m considering buying the assets of an insolvent company that has gone into administration / receivership.
Included in the assets is a customer database.
How does GDPR apply?
is the purchasing ...
-1
votes
1answer
51 views
GDPR - User entering other peoples data
I would like to build a software application; a party planner, that allows the user to register his guests and RSVP.
Managing a guest list of 50-100 people can be tough, and a tool would help out a ...
1
vote
1answer
34 views
Does the European Union allow to store medical (sensitive) data in cloud platforms such as Amazon Web Services or Google Cloud?
Does the EU allow to store patients medical data in cloud databases from providers such as Amazon Web Services or Google Cloud?
What are the legal requirements?
Can you point at some legal source ...
0
votes
2answers
40 views
GDPR - Storage and processing of student email addresses
I'm writing some software for use in a school. An essential function of the software is to email students using their school provided email account.
My question is, does GDPR apply to the storage and ...
1
vote
1answer
76 views
Does Article 27(1) of the GDPR apply to a U.S. controller using Google Analytics if it only sells to U.S. clients?
If a U.S. controller who only sells to U.S. clients uses Google Analytics on their website, would it be required to have a representative in the Union? I am unsure whether Google Analytics in this ...
2
votes
1answer
54 views
Who's liable for GDPR compliance when embedding/hosting a self-contained 3rd-party website/service?
I'm building a website for a client (a hotel) in Germany. In addition to a bunch of static pages, this website will also host a reservation system which is provided by a 3rd party software company in ...
10
votes
6answers
4k views
GDPR and right to provide meter readings
My energy company have estimated the opening meter readings for my move in date for a property.
I have the correct readings in photos taken on that date, but the energy company won't allow me to ...
5
votes
1answer
2k views
I have created an App to help isolated people in Corona Virus lockdown. Do GDPR rules apply
I have created an App at helpathome.me which isolated people can use to fill out a form and request help from others.
I innocently thought this would be fine but a friend told me that I must comply ...
1
vote
2answers
60 views
Reporting poor privacy practices in a mobile app
I found a vulnerability in a paid Smartphone app. It is supposed to contain a lot of private details.
There is a logging option for support that you can switch off and on, to extract the part that ...
0
votes
2answers
43 views
How to anonymize network data packets for commercial use?
I am working on a project where I have to identify anomalies in network traffic of business networks with machine learning. The algorithm is feeded with captured network packets from inside of the ...
2
votes
1answer
235 views
Online Proctoring, Exams, and the GDPR?
Due to the coronavirus outbreak, my university has tentatively canceled all live forms of live education, including exams. Instead, they have decided to hold exams through an online proctoring ...
0
votes
0answers
64 views
Facebook vs GDPR - Is Facebook never deleting the Searches you do?
I frequently delete the Search History from my account's Activity Log.
However, every time I start typing in Search, Facebook seems to remember perfectly searches I've done in the past.
Suggestions ...
1
vote
1answer
89 views
Subject Access Request (SAR) of data relating to cookies?
Take a search engine (e.g. Google), where user A can make searches without logging in with their account. The search engine collects, processes and stores, over time, a number of data about the user A,...
