Questions tagged [personal-information]
This tag is for questions about information concerning a specific person. It includes privacy issues, access issues, and security issues.
73
questions
-4
votes
0
answers
83
views
Used personal history against u by everyone even the police [closed]
Ok ten years ago a app was used to place someone on it using there personal history without permission that caused this person to have everything took from him while his ex girlfriend says it's only ...
0
votes
1
answer
49
views
Is "gossip surveillance" processing personal data under the GDPR?
The Guardian has an article on "gossip surveillance" where strangers report on social media private conversations they are not party to in the hope of exposing duplicity from the speakers in ...
-1
votes
0
answers
71
views
Opt in opt out on webuyanyphone.com
I recently tried to sell a old mobile phone through webuyanyphone.com i was happy with the price they offered me so finished my application and went on my way. Gave them all my bank details to ...
-1
votes
1
answer
43
views
Personal information and authentication/log data
Building a software program that will integrate into a larger system that contains business data. To access this system (and the underlying integrated tool) individuals must enter their email address ...
3
votes
1
answer
103
views
(USA) Can reproduction of a public record be prohibited?
Partial image of what I suspect is a public record:
Is "reproduction prohibited" legally enforceable? That would make thousands of genealogists in violation, as well as sites like ...
3
votes
1
answer
92
views
Can one person's genetic information be another persons personal information?
In the UK GDPR ‘personal data’ is defined as:
‘personal data’ means any information relating to an identified or identifiable natural person (‘data subject’); an identifiable natural person is one ...
0
votes
0
answers
38
views
Is jigsaw identification enough to render a piece of information DPA-subject “personal data“? [duplicate]
In some legal contexts there is the notion of “jigsaw identification,” that is pieces of information that could allow certain people if adequately placed and privileged to other pieces of information ...
1
vote
2
answers
65
views
How to Uniquely Identify a Mobile Device Without Breaking PII (Personally Identifiable Information) Laws [closed]
I work for a small software division of a large non-digital company, and we need a way to identify a mobile device without directly using PII (Personally Identifiable Information).
We know that MAC ...
10
votes
2
answers
4k
views
Is a "login timestamp" considered as personal data according to GDPR?
If software is saving the timestamp of the last login of a user, would that timestamp itself be considered personal data by GDPR?
2
votes
1
answer
94
views
Can privacy regulations prevent my alma mater from sharing the fact that I graduated there?
I graduated from some private high school a long time ago. During my years there, I have experienced and witnessed a variety of dubious practices that violate students' rights. I always wanted to ...
2
votes
1
answer
215
views
Comcast Xfinity CCPA Policy
I have an old login with Comcast under a relative’s primary (billed) account that I'd like to have deleted under CCPA. The relative lives in Florida, but I am a California resident. I'm attempting to ...
1
vote
1
answer
64
views
Does 2 party consent apply if the data is anonymized?
If I have a text conversation between myself and another party, both of whom reside in 2 party consent states in the US, if I remove all reasonably identifying information, do I still need consent ...
1
vote
0
answers
57
views
After we sign up online website for services, we give up our phone number and email address,legally what can the company do internally and exterally
During the pandemic time, fond myself signup a lot of food delivery services, where pretty much they all asks my phone, email and address. And some online services Now, I got call from people trying ...
4
votes
1
answer
119
views
Can the corporation that I work for (I am not salary or a subcontractor) use my personal information & home address for business and billing purposes?
I have a corporate credit card that is utilized for business purposes at the location I work, which is not where corporate headquarters is.
Today the business/ billing address was changed by the ...
1
vote
1
answer
58
views
Can one make a Subject Access Request of a telephone Communications Provider?
I have received a suspected scam telephone call. Searching the internet for the number I found that "phone block 247520 is operated by DIDWW Ireland Limited". Searching this I came across ...
1
vote
0
answers
36
views
What legal limits are there on large scale population genetic capture and analysis?
A recent paper speculates that it is currently possible to capture human genetic material from the environment in a way that individuals can be identified and their genetics analysed.
Inadvertent ...
2
votes
0
answers
44
views
Search engine data breaches, osint
Such a search engine that is deliberately created for the purpose of collecting open source information about security related incidents including data breaches and including a link to the source that ...
0
votes
1
answer
241
views
Is OpenAI/ChatGPT compliant with GDPR, if they don't allow changing or removing the Phone Number and Email Address?
Italy has recently banned ChatGPT, and is now allowing it again in the country, after they implemented a few privacy controls.
The fact that it's now allowed again makes me wonder if Italy (and the ...
0
votes
2
answers
115
views
Publishing personal data obtained on a Swedish server - GDPR implications
Imagine a small social media chat platform is hosted in Sweden and subject to GDPR. Party A sends personal information to party B using the platform, using a private message. The information was ...
24
votes
2
answers
5k
views
High School forced labor for grades?
I have a friend in a high school computer science course in Texas. This is a course required for graduation and is not a volunteer thing. Apparently, the teacher is having the students develop an ...
2
votes
2
answers
156
views
Is a bank account history of transactions considered personal data in the sense of GDPR?
For archival purposes, I'm trying to get the full history of transactions on my bank account since I opened it in 2019. I know my bank still has it since it's visible in the mobile app (I can scroll ...
10
votes
2
answers
2k
views
GDPR - Are technical identifiers personal data?
I've built devices for an internet service provider company (in EU) to measure internet speed at subscribers' home. The devices are used by company technicians when fixing network speed problems ...
2
votes
1
answer
197
views
What legal actions can we take for website that doesn't remove PII upon requests?
A business directory listing website scraped old data for their listings. They use random contact information, personally identifiable information (PII), logos/banners to falsely represent those ...
11
votes
2
answers
2k
views
Are users' personal notes about other users subjected to the GDPR right of access?
Some applications, like Discord or Mastodon, allow a user A to put private notes (only accessible to A) next to the profile of another user B. This data is very probably Personal Identifiable ...
1
vote
1
answer
106
views
Webhosts' legal obligations to remove publicly available content associated with specific IP addresses
Let's say one builds a website allowing users to post text content that is publicly available and searchable via the IP address of the users who submitted it. Would the owner of that website be ...
0
votes
1
answer
72
views
Practical GDPR guidance for online businesses
When you start an online business, or even just create a website, there is a lot of confusion on what needs to be done to comply with GDPR. As many online resources (including StackExchange) suggest, ...
0
votes
2
answers
128
views
Where should personal data be stored to comply with GDPR?
We are a company based in Europe.
We have personal data about our users worldwide (name, mail, phone number, company, title). And currently it is stored in Microsoft Azure. We don't know physically ...
10
votes
4
answers
5k
views
Is there a way to determine if an email address is personal information?
The GDPR defines personal data as:
Personal data is information that relates to an identified or identifiable individual.
My understanding is that this means that [email protected] is ...
1
vote
1
answer
89
views
Is satelite data personal data?
It is in the news that artificial intelligence (AI) has been applied to aerial photography to identify homeowners who have made unauthorised additions of swimming pools to their properties in France. ...
0
votes
2
answers
129
views
What is the appropriate way to initiate a money claim if the defendant will not provide an address?
Say Alice was in an accident with Bob that was 100% Bobs fault. At the scene email addresses and vehicle registration number plates were exchanged, and in later email exchanges the insurance details ...
2
votes
3
answers
385
views
How can one not know their own legal marital status?
I saw this screenshot floating around for a California jury duty online questionnaire. Notice that "Not known" is a selectable option for one's marital status:
(image redacted)
I don't know ...
2
votes
2
answers
126
views
GDPR and personal data reselling
The situation is following:
I had an account in company A which then was sold to company B, both conduct online services.
I wasn't aware of this because I didn't log in to my account for several years,...
2
votes
1
answer
86
views
Legality of Credit Bureaus selling information without consent
I recently had a hard pull for a mortgage done (USA based). Since then, my personal phone number has been bombarded with calls and texts related to "better offers", despite being registered ...
8
votes
3
answers
5k
views
Why are websites like voter's records legal?
How is it possible that https://voterrecords.com/ can operate without any problems?
They reveal your personal information without your direct consent. Basically, you can find the address of anyone who ...
6
votes
2
answers
1k
views
What is considered personal information according to the US law?
As a follow up question from this question a person's name, age, address, parties affiliation are considered public data.
I'd like to ask then what is considered personal information?
So if there is a ...
-2
votes
2
answers
302
views
Is Doxing illegal in Iceland?
While it is my understanding that electronically or postally publishing someone's personal information in an attempt to cause them emotional distress, intimidate them, or place them in reasonable fear ...
15
votes
1
answer
4k
views
Can I request my comment be deleted from a forum if I made that post when I was 12?
Basically what the title says. I'm very ignorant when it comes to these sorts of laws and rules so please be kind. I made a post on an “audition forum” when I was 12 years old. The post included my ...
17
votes
2
answers
5k
views
Is it allowed to non-consensually submit someone's diary as evidence?
In episode 12, season 4 of The Office, called "The Deposition", the diary of a witness (Michael Scott) is used as evidence, without the witness's consent. The diary was taken by the suer, ...
3
votes
1
answer
255
views
Under the GDPR in Germany, is a privacy-policy required when not tracking any personal data whatsoever
I have a small static personal website, where I publish some technical articles and my personal CV.
Do I need to include a privacy-policy if:
There are no (third- or first party) tracking services ...
1
vote
1
answer
72
views
Privacy Policy and CCPA - selling of personal information
I would like to know if the following scenario is considered as "selling personal information" according to CCPA:
Scenario:
Have a subscription based web application. For payment have an ...
1
vote
1
answer
102
views
Under GDPR can a company give out the demographics of employees e.g. ethnic background without anonymising it?
If a client asks for the demographics of a company's employees e.g. female to male ratio or ethnicity. Does this have to be anonymised so it is compliant with the GDPR or can the names be revealed?
2
votes
1
answer
110
views
Does failure to provide photo of face count as breach of GDPR in UK?
I have requested that an aesthetic clinic send me the 'before' images taken of my face before a procedure two times via email. They have ignored my requests while responding to other questions in the ...
1
vote
1
answer
77
views
GDPR (and data protection laws in general) in regard to non-commercial, personal database
(this is the closest StackExchange site I could find, even so, I'm sorry if the Q is still a bit out of place).
So, I've just finished building an application for better handling some of my needs and ...
0
votes
1
answer
110
views
GDPR and Personal Data Encryption
Suppose we have some user's personal data, that we have to encrypt and store in a database.
I've read this would technically not be a breach of personal data, since the attacker would only have ...
1
vote
1
answer
56
views
GDPR and Certification Check
Based in UK.
I manage a certification website that allows users to register an account and complete a course, before doing so they explicitly agree to the website's privacy policy and GDPR. The ...
6
votes
1
answer
2k
views
Is it illegal to fetch a picture from another phone remotely after having a consent Or prior Permissions?
Me and my girlfriend are using an app that takes the access of your partners phone camera, then clicks the image & sends image back to requester. After fiddling with it, we are planning to launch ...
0
votes
1
answer
93
views
Can you opt out of use of your personal information by your country's registry?
I was changing my address a week ago and I noticed that it said in tiny letters that the information I provide may be used for direct advertising, marketting, scientific research, data collection and &...
0
votes
1
answer
81
views
Privacy and ownership of my medical records
Can I request my medical records (such as having had a flu, surgery, etc) to be taken out, to keep them myself instead of trusting an institution to respect my privacy according to any EU laws?
I have ...
0
votes
1
answer
98
views
May I publish source code of my project without notifications about use of personal data and cookies and not break laws during it?
I have created the demo software project (frontend and backend modules) for manage staff. I want to publish source code of the project on GitHub. I know that according to GPDR page must have ...
6
votes
3
answers
4k
views
What happens if someone dies without a trace?
So normally the police or hospital is called and people get a death certificate.
If someone disappears with no report, what happens? Is a death certificate ever issued?