Questions tagged [gdpr]
Questions about the European Union General Data Protection Regulation (GDPR)
922
questions
0
votes
0
answers
65
views
Mandatory languages for privacy policies in Japan (APPI)
I work on Apps, currently Android, which are distributed via Google Play.
As the EU has GDPR, in Japan they have APPI (Act on the Protection of Personal Information) which is something like the ...
- 1,402
0
votes
0
answers
80
views
Very simple static website with Google Analytics. How to make it GDPR compliant?
There is a very simple static website for a commerce. That website only shows information. It has Google Analytics to count visits with the default GA script placed in :
<head>
<script>...
0
votes
0
answers
33
views
GDPR legitimate interest and Contact Picker API
There is a draft web standard Contact Picker API see here and here. An explicit use case is "bootstrapping a user’s social graph for social networks". I'm interested in what ways this can ...
0
votes
1
answer
72
views
Does EU geoblocking apply to businesses outside EU?
This
: https://support.stripe.com/questions/eu-geo-blocking-regulation-changes
states that EU has passed a law preventing geoblocking .Does this
apply to businesses outside EU. It is favourable to ...
user35276
0
votes
2
answers
117
views
Are search keywords seen as non-personal information?
For example someone is browsing a popular shop like Amazon, what does GDPR say about this?
- 103
0
votes
0
answers
68
views
GDPR - Who Called Me type of situation
I would like to ask how does it work with GDPR and a service like "who called me".
Basically there are no publicly listed phone numbers as these kind of websites are using pretty much every ...
- 1
0
votes
0
answers
66
views
How to describe your experience in your CV/Resume without breaking copyright / GDPR rules?
Are there rules (EU & US) defining how far one can go in decribing his professional experience as a software developer, and telling about the projects he worked on?
For example, if I do not ...
- 101
0
votes
0
answers
99
views
Is it illegal to refuse to fix a hacked website?
Suppose there's a website or a server that has been hacked. There is no personal data stored anywhere, so there hasn't been a real data breach, because basically there's no valuable data to steal at ...
- 1,818
0
votes
0
answers
97
views
Private messages on social media - GDPR [duplicate]
As the title suggests, if you delete your account on social media/dating websites and there are personal/private chat messages there.
Under GDPR, would these have to be deleted by the controller?
So ...
0
votes
0
answers
62
views
Is the Absence of Account deletion possibility legal in Europe? (GDPR)
This website explicitly states there is no easy way to "delete your account". It is accessible from within Europe.
How legal is this?
What would be my lever to force them to delete my ...
- 101
0
votes
0
answers
53
views
If a user of my site gives me info of a third party they claim to be affiliated with, am I allowed to contact that third party to check?
I am developing an app where a part of the on-boarding process requires users to enter the email / company name of the agency that they are affiliated with (the 3rd party). I need to confirm that they ...
- 109
0
votes
1
answer
102
views
Validity of automated GDPR subject access requests
If a software product was distributed that automated the creation and sending of GDPR subject access requests, do these request impose the same legal requirements on the data processor as if the ...
- 867
0
votes
0
answers
84
views
Facebook vs GDPR - Is Facebook never deleting the Searches you do?
I frequently delete the Search History from my account's Activity Log.
However, every time I start typing in Search, Facebook seems to remember perfectly searches I've done in the past.
Suggestions ...
- 993
0
votes
0
answers
94
views
Is WhatsApp GDPR compliant as it allows backups for group chat?
Currently WhatsApp claims it uses end to end encryption.
However the app provisions users to switch on backups to Google Drive and other providers. So if I am in a group chat with a set of users and ...
- 101
0
votes
0
answers
66
views
Is WhatsApp legally obligated to remove my chat on every device, based on the GDPR? [duplicate]
Dear Law StackExchange community,
I'm attempting to get chat history removed with another party dating back a long time ago. I don't want the chats to remain existent on any device whatsoever, so I ...
0
votes
0
answers
43
views
Data Privacy: Should a user be allowed to change another users profile information?
In a SaaS platform, should users be allowed to change other users profile information (things like Name, Gender, Company they work for etc)?
What laws (US & EU) would give guidance either way? ...
- 1
0
votes
0
answers
49
views
Question Regarding GDPR
I have a question regarding The General Data Protection Regulation 2016/679 in European law and I'm not even sure this is the right place to ask, but I'll ask anyway as I'm stuck on where to find this ...
- 11
0
votes
0
answers
30
views
Application of the GDPR to emails one has sent [duplicate]
Reading https://gdpr-info.eu/issues/personal-data/, it seems you could use the GDPR for, well, unexpected request. For example, if I ask Google to remove any email from me I have send, not only from ...
- 113
0
votes
0
answers
34
views
Does right to Data Access request /GDPR supersede restrictions in Employment contract of previous employer
Does right to Data Access request /GDPR supersede restrictions in Employment contract of previous employer ?
Is above fundamental right's affected by
Clauses in temporary employment contract like '...
- 27
0
votes
2
answers
118
views
Emails from clients and GDPR
I created a website for a friend's company that has no user account feature, it is only meant to be an online catalog for prices. The only user data we might receive are data that users fill in the ...
0
votes
0
answers
34
views
How do platform sites ensure their users do not abuse forwarded user data?
I am asking this question based upon the specific case of open source software sites, but the concept should probably apply equally to other websites that serve as a "platform" for their users to ...
- 374
0
votes
1
answer
143
views
Would it be illegal to forward CCTV footage of someone committing a crime to their employer? (UK)
An incident has occurred where an individual in a private business committed an offence (common assault/battery).
As expected the police seem fairly unmotivated or interested however a quick Google ...
- 145
0
votes
1
answer
92
views
Legal obligations of a company in case of GDPR-related vulnerability
First of all I would like to state that my question occurs in a context of EU laws and EU citizen.
I found a vulnerability in a product distributed in a few companies of EU countries. This ...
- 150
0
votes
2
answers
419
views
Is it illegal to NOT store logs within the UK? (VPN related)
Introduction:
I co-run a VPN company. I have a few legal questions since our service has a strict NO-LOG policy enforced.
Question:
In the UK, it is illegal to store sensitive and private customer ...
- 3
0
votes
2
answers
82
views
GDPR: Transmitting results from secondary to primary care records
In the UK, results of a blood (or other) test taken at a hospital (in secondary care) are stored in the hospital's records but are not automatically forwarded into primary care records (GP records) ...
- 277
-1
votes
2
answers
113
views
Under GDPR's strict consent requirement rules, could a criminal/hacker/troll remain anonymous in all his activities?
Since GDPR strictly requires consent to Personal Identifiable Information (PII), could a criminal exploit online services by remaining anonymous in all his criminal activities?
Providers are not ...
- 1,481
-1
votes
1
answer
108
views
Where is it stated in the GDPR that the GDPR only applies to EU citizens?
I recently came to the shocking realization that the GDPR does not apply to natural persons who are not EU citizens. I looked up the GDPR to find the Article or GDPR item that mentions this but could ...
- 109
-1
votes
2
answers
97
views
What should I reply when someone ask about their GDPR information against a cold marketing email?
I recently received an email says "..please send me a GDPR information about all my data you have assigned to this email.."
I collect the email address from a public domain (say GitHub) and ...
- 109
-1
votes
1
answer
651
views
Google AdWords banned my account. Can I request complete deletion under GDPR?
GDPR introduces a new right to be forgotten, and I no longer consent to Google keeping my data for the sole purpose of maintaining a ban. (Google is keeping my data in order to enforce their ban on ...
- 121
-1
votes
2
answers
312
views
Is Apple scanning user content for child abuse a violation of GDPR?
According to this article Apple is scanning all the photos users have on their devices to detect possible child abuse. The article explains that a NeuralHash of each image will be uploaded to Apple ...
- 520
-1
votes
2
answers
114
views
Blocking certain countries
Due to some laws one wants to block certain countries from accessing his app which he uploaded on play console.One turns off those countries in GOOGLE play console so it cannot be downloaded in those ...
-1
votes
2
answers
42
views
Can data protection rights of a subject be voluntarily waived?
Presumably not on protrusion by a service provider as a condition of their service. But what if someone writes to someone super busy whom they admire and says “look I really respect you and don’t want ...
- 5,858
-1
votes
1
answer
72
views
By what mechanism does GDPR jurisdiction bind data controllers that operate outside the EU?
If you process the data of data subjects resident in the EU then you are supposed to be bound by the GDPR no matter where you are located.
Why care what the GDPR says if you don't have a presence in ...
-1
votes
1
answer
47
views
Arbitration and GDPR
Arbitration allow a both parties to settle the dispute outside the court where the arbitrator would decide the law to b e applied to the dispute?.
However, arbitration will not exempt their ...
- 85
-1
votes
2
answers
114
views
Semi-banned from instragram - Rights under GDPR?
I'm mostly out of my depth here and have no knowledge about this. I'll try to make it short and to the point.
I use my instagram account for posting pictures of my vacations and the occasional picture ...
-1
votes
2
answers
220
views
EU refunds law for Play Store
According to EU refund law, if a person releases an app on the Google Play Store, does the person need to even give the payment he received back? Can one specify no refunds by putting it after the app ...
-1
votes
1
answer
72
views
Why is my GDPR (a.17) request not fulfilled?
For over a year, I'm trying to get "wordpress.org" to delete my personal data from their bugtracker (the pseudonym is linked to my full personal address).
According to https://wordpress.org/...
- 99
-1
votes
1
answer
130
views
GDPR account verification
I am having trouble in deciding what information I should be recording in order to verify an account user in the event that
a) the user is locked out of their account for some reason
b) they make an ...
- 101
-1
votes
1
answer
102
views
Is OpenAI/ChatGPT compliant with GDPR, if they don't allow changing or removing the Phone Number and Email Address?
Italy has recently banned ChatGPT, and is now allowing it again in the country, after they implemented a few privacy controls.
The fact that it's now allowed again makes me wonder if Italy (and the ...
- 45
-1
votes
1
answer
67
views
Who is data controller for automatic communications under GDPR? [closed]
This is how automatic communications infastructure works :
an automatic communications creator registers with an automatic communications service . Users registered with this automatic communication ...
-1
votes
1
answer
62
views
Does Excessive consents clause hold up against consent requests in GDPR
GDPR states that one must record consent https://ico.org.uk/for-organisations/guide-to-data-protection/guide-to-the-general-data-protection-regulation-gdpr/consent/how-should-we-obtain-record-and-...
user35276
-1
votes
2
answers
56
views
GDPR compliance - not an “adequacy decision” country [closed]
Our corporate website's server is located in a country that's considered not an “adequacy decision” country, according to GDPR.
I'm aware that GDPR allows that (under certain conditions). It's just I ...
- 3
-1
votes
2
answers
141
views
As an individual, not a company, if I collect email addresses of visitors to my website, what gdpr regulations apply to me?
I'm planning on making a website to act as a CV / portfolio of my work as a software developer. I intend to lock this personal data behind a token based access system, so that it isn't available ...
- 101
-1
votes
2
answers
118
views
What legal conditions do I have to meet to open an open source website?
I'm working on a website for a pretty long time and in the close future I want to open it into the public. The problem is, my website collects personal data and cookies which (in my country - Poland) ...
- 113
-1
votes
2
answers
64
views
What would constitute personal data? [duplicate]
For example, would a name in the form first initial last name be considered personal data, considering this could apply to many people?
What about if we added in a hobby, perhaps that they watch ...
- 135
-1
votes
1
answer
33
views
Restricting processing of data provided to police
Suppose that a person A would like to report a crime of which they’ve become a victim, to the police. For this purpose the police typically require the victim’s date of birth in order to create a ...
- 5,858
-1
votes
1
answer
37
views
What are good tips and tricks to keep in mind when performing a subject access request for a comprehensive record of self-pertinent data from the met? [closed]
Bob would like to obtain as comprehensive as possible am archive of all data held on him by the metropolitan police, as well as any other police networks that they may be part of and share data with/...
-1
votes
1
answer
173
views
Is it possible to embed a PayPal donation button and still be GDPR compliant? [closed]
I've read that PayPal embeds a pixel in its button which tracks every user that visits the website. Is that true?
More generally, is it possible to embed a PayPal donation button and still be GDPR ...
- 9
-1
votes
2
answers
162
views
Help figuring out GDPR and pseudonymisation
I have server that needs to identify returning visits from users. I'm trying to figure out what I can do and whether I'm supposed to ask for consent from the user.
I don't care who the actual user, ...
- 101
-1
votes
1
answer
99
views
GDPR - User entering other peoples data
I would like to build a software application; a party planner, that allows the user to register his guests and RSVP.
Managing a guest list of 50-100 people can be tough, and a tool would help out a ...
- 101