Questions tagged [personal-information]

This tag is for questions about information concerning a specific person. It includes privacy issues, access issues, and security issues.

Filter by
Sorted by
Tagged with
6 votes
2 answers
1k views

What is considered personal information according to the US law?

As a follow up question from this question a person's name, age, address, parties affiliation are considered public data. I'd like to ask then what is considered personal information? So if there is a ...
user avatar
  • 251
8 votes
3 answers
4k views

Why are websites like voter's records legal?

How is it possible that https://voterrecords.com/ can operate without any problems? They reveal your personal information without your direct consent. Basically, you can find the address of anyone who ...
user avatar
  • 251
16 votes
1 answer
4k views

Can I request my comment be deleted from a forum if I made that post when I was 12?

Basically what the title says. I'm very ignorant when it comes to these sorts of laws and rules so please be kind. I made a post on an “audition forum” when I was 12 years old. The post included my ...
user avatar
  • 161
17 votes
2 answers
4k views

Is it allowed to non-consensually submit someone's diary as evidence?

In episode 12, season 4 of The Office, called "The Deposition", the diary of a witness (Michael Scott) is used as evidence, without the witness's consent. The diary was taken by the suer, ...
user avatar
3 votes
1 answer
63 views

Under the GDPR in Germany, is a privacy-policy required when not tracking any personal data whatsoever

I have a small static personal website, where I publish some technical articles and my personal CV. Do I need to include a privacy-policy if: There are no (third- or first party) tracking services ...
user avatar
  • 33
1 vote
1 answer
61 views

Under GDPR can a company give out the demographics of employees e.g. ethnic background without anonymising it?

If a client asks for the demographics of a company's employees e.g. female to male ratio or ethnicity. Does this have to be anonymised so it is compliant with the GDPR or can the names be revealed?
user avatar
  • 231
1 vote
1 answer
30 views

Privacy Policy and CCPA - selling of personal information

I would like to know if the following scenario is considered as "selling personal information" according to CCPA: Scenario: Have a subscription based web application. For payment have an ...
user avatar
  • 113
3 votes
1 answer
103 views

Does failure to provide photo of face count as breach of GDPR in UK?

I have requested that an aesthetic clinic send me the 'before' images taken of my face before a procedure two times via email. They have ignored my requests while responding to other questions in the ...
user avatar
1 vote
1 answer
46 views

GDPR (and data protection laws in general) in regard to non-commercial, personal database

(this is the closest StackExchange site I could find, even so, I'm sorry if the Q is still a bit out of place). So, I've just finished building an application for better handling some of my needs and ...
user avatar
0 votes
1 answer
68 views

GDPR and Personal Data Encryption

Suppose we have some user's personal data, that we have to encrypt and store in a database. I've read this would technically not be a breach of personal data, since the attacker would only have ...
user avatar
-2 votes
2 answers
232 views

Is Doxing illegal in Iceland?

While it is my understanding that electronically or postally publishing someone's personal information in an attempt to cause them emotional distress, intimidate them, or place them in reasonable fear ...
user avatar
1 vote
1 answer
43 views

GDPR and Certification Check

Based in UK. I manage a certification website that allows users to register an account and complete a course, before doing so they explicitly agree to the website's privacy policy and GDPR. The ...
user avatar
  • 111
6 votes
1 answer
2k views

Is it illegal to fetch a picture from another phone remotely after having a consent Or prior Permissions?

Me and my girlfriend are using an app that takes the access of your partners phone camera, then clicks the image & sends image back to requester. After fiddling with it, we are planning to launch ...
user avatar
  • 61
0 votes
1 answer
54 views

Privacy and ownership of my medical records

Can I request my medical records (such as having had a flu, surgery, etc) to be taken out, to keep them myself instead of trusting an institution to respect my privacy according to any EU laws? I have ...
user avatar
1 vote
1 answer
68 views

Can you opt out of use of your personal information by your country's registry?

I was changing my address a week ago and I noticed that it said in tiny letters that the information I provide may be used for direct advertising, marketting, scientific research, data collection and &...
user avatar
0 votes
1 answer
74 views

May I publish source code of my project without notifications about use of personal data and cookies and not break laws during it?

I have created the demo software project (frontend and backend modules) for manage staff. I want to publish source code of the project on GitHub. I know that according to GPDR page must have ...
user avatar
  • 33
6 votes
3 answers
4k views

What happens if someone dies without a trace?

So normally the police or hospital is called and people get a death certificate. If someone disappears with no report, what happens? Is a death certificate ever issued?
user avatar
  • 1
18 votes
3 answers
4k views

I need my twitter deleted

I have seen one similar question but it is almost two years old, and there's a bit more to it. I created a twitter account a long time ago because I was doing live streaming on adult websites. I need ...
user avatar
9 votes
1 answer
1k views

Denied Data Subject Access Request (DSAR) due to third-party information

A while ago I made a data subject access request (DSAR, asking for personal information which is stored about me) which was part of an ongoing complaint. In a nutshell, I did a complaint to a company ...
user avatar
  • 241
0 votes
1 answer
95 views

Is there generally a duration after which a permission given to a person is terminated automatically?

Consider the following as an example: Jack and Sam were both 18 years old. At the time, both were good friends, and Jack has given Sam permission to use his e-mail account for sending and reading e-...
user avatar
2 votes
1 answer
96 views

Let's say a UK employer doesn't have a password policy - can they insist that an employee divulge a password used on a client's systems?

Purely a hypothetical scenario: UK employer is an agency with various teams that provide services - some of which are digital - to a third party. The employees create accounts on the third party's ...
user avatar
1 vote
0 answers
21 views

Does COPPA require that users who provide PII while under 13, then turn 13 have their PII purged?

If there is a user of an online website who provides PII while under the age of 13, then later turns 13, would COPPA require that that person have their PII purged from that online website?
user avatar
0 votes
1 answer
169 views

GDPR - Are the typical lists of examples for personal data misleading?

Article 4 of the EU GDPR states ‘personal data’ means any information relating to an identified or identifiable natural person (‘data subject’); The explanation for the term ‘personal data’ as ...
user avatar
0 votes
3 answers
76 views

GDPR, personal and political activity

The GDPR does not apply to the processing of personal data that is "by a natural person in the course of a purely personal or household activity". I cannot find a description of "...
user avatar
  • 837
1 vote
1 answer
24 views

Does a company have to disclose a data breach as part of the agreement with the SEC to be publicly traded?

If I run a publicly traded company that's releasing hardware and that hardware is compromised and customer data is harvested, do I have to publicize that leak's existence? What if the people that ...
user avatar
  • 1,466
1 vote
1 answer
96 views

GDPR & Privacy Policy for a personal website where the only potential personal data is IP logs

I'm based in the UK, and I am building a personal website (basically an online resume/portfolio) which I have ensured does not collect any personal information (there are no forms, cookies etc.). I do ...
user avatar
0 votes
1 answer
70 views

Should I blur personally identifiable information on Facebook screen recording for YouTube?

(Global question: EU, US, etc) I'm recording a video for YouTube where I show how browser extension works while surfing through different Facebook Groups, Business Pages, Personal Profiles, etc. ...
user avatar
  • 101
3 votes
1 answer
128 views

Zipcar won't delete my driver's license from their records; are they legally required to?

I cancelled my Zipcar account 5 years ago. Today I tried to re-open it. I created a new account, but it wouldn't allow me to because it said my driver's license was already in use. I called customer ...
user avatar
  • 277
2 votes
1 answer
110 views

What charges does one risk if they share personal pictures without permission?

This question was inspired by something I read on another Stack Exchange website. Basically, Mr. Johnson works at a small company Good Company. His responsibility is to manage and organise the ...
user avatar
  • 245
1 vote
1 answer
50 views

Can I use an Employee's Personal ID in an company internal project? (EU Data protection Law)

I want to create an Order-Website for our company, where employees can order dishes from the canteen, so they know roughly how much food to order. Now the question came up, if you order some dish, but ...
user avatar
6 votes
1 answer
806 views

UK: What information are the police legally required to collect when going door-to-door, and why?

A few days ago, a police officer knocked on my door in the evening and asked whether I had noticed any disturbances in my street earlier in the day - he said it was in relation to reports that they'd ...
user avatar
1 vote
0 answers
54 views

Is it legal to advertise a service as 'free' if they collect data?

I noticed that a lot of companies label themselves as 'free' even though they collect personal data (which in today's day and age is practically a currency in and of itself). I was wondering how/if it'...
user avatar
  • 177
0 votes
1 answer
40 views

Shoud a company send to customers of its clients notice when getting data about them under GDPR Article 14?

A SaaS company (A) provides services, (e.g. web hosting) for its clients, (e.g. web agency B). The clients can create websites for their customers (C) and host them using the web hosting. Web agencies ...
user avatar
2 votes
1 answer
56 views

Should the client be informed every time when more personal data is requested under GDPR Article 13?

A SaaS company offers some services, which require registration. Its clients are notified about Terms of Service and Privacy Policy during the registration process. Should the company send to the ...
user avatar
0 votes
1 answer
326 views

Twitter and account deactivation - Do you have to explicitly ask for account to be deleted if company nowhere says that it will do so? [duplicate]

I am trying to delete my Twitter account. Twitter only has a "deactivate" account button, and no "delete" account button, as I posted here. It looks like in the guides posted by ...
user avatar
0 votes
0 answers
277 views

Twitter has no "delete account" button - no mention of data deletion after 30 days of account deactivation - GDPR and European law enforcement

I want to delete my Twitter account. I believe Article 17(1)(a) of GDPR compels Twitter to give me the option to do that. But Twitter has no "delete account" button. There is only a "...
user avatar
0 votes
1 answer
165 views

Can ISPs in the EU (covered by GDPR) record the device IDs on a home network?

In theory an ISP who provides a integrated router/Wifi point could sniff and record the traffic from individual devices on a home network. These devices (like PCs, phones and tablets) could be ...
user avatar
5 votes
1 answer
109 views

GDPR rights of person who moves into the EU

Suppose that a person not resident (nor present) in the EU, say in Mexico, obtains services from a provider located in the US, and provides personal information in connection with those services, ...
user avatar
  • 89.2k
-1 votes
2 answers
67 views

Must VPN service providers whose servers are in the US, disclose a customer's IP address upon request from another country?

Is it obligatory for a VPN service provider with servers in the United States to disclose a user's personal information (such as IP address and logs) in response to a request that came from another ...
user avatar
5 votes
3 answers
167 views

Can the GDPR be used to obtain US voting information

This grows out of a comment in the question Who Has the Right to Access State Voter Records and How May That Right be Expediently Exercised? If a US citizen is currently resident in the EU, can that ...
user avatar
  • 89.2k