Questions tagged [personal-information]
This tag is for questions about information concerning a specific person. It includes privacy issues, access issues, and security issues.
81
questions
25
votes
2
answers
5k
views
High School forced labor for grades?
I have a friend in a high school computer science course in Texas. This is a course required for graduation and is not a volunteer thing. Apparently, the teacher is having the students develop an ...
- 251
18
votes
3
answers
4k
views
I need my twitter deleted
I have seen one similar question but it is almost two years old, and there's a bit more to it.
I created a twitter account a long time ago because I was doing live streaming on adult websites. I need ...
- 189
17
votes
2
answers
6k
views
Is it allowed to non-consensually submit someone's diary as evidence?
In episode 12, season 4 of The Office, called "The Deposition", the diary of a witness (Michael Scott) is used as evidence, without the witness's consent. The diary was taken by the suer, ...
- 988
15
votes
1
answer
4k
views
Can I request my comment be deleted from a forum if I made that post when I was 12?
Basically what the title says. I'm very ignorant when it comes to these sorts of laws and rules so please be kind. I made a post on an “audition forum” when I was 12 years old. The post included my ...
- 151
11
votes
2
answers
2k
views
Are users' personal notes about other users subjected to the GDPR right of access?
Some applications, like Discord or Mastodon, allow a user A to put private notes (only accessible to A) next to the profile of another user B. This data is very probably Personal Identifiable ...
- 113
10
votes
4
answers
5k
views
Is there a way to determine if an email address is personal information?
The GDPR defines personal data as:
Personal data is information that relates to an identified or identifiable individual.
My understanding is that this means that [email protected] is ...
- 8,612
10
votes
2
answers
4k
views
Is a "login timestamp" considered as personal data according to GDPR?
If software is saving the timestamp of the last login of a user, would that timestamp itself be considered personal data by GDPR?
- 233
10
votes
2
answers
2k
views
GDPR - Are technical identifiers personal data?
I've built devices for an internet service provider company (in EU) to measure internet speed at subscribers' home. The devices are used by company technicians when fixing network speed problems ...
- 203
9
votes
1
answer
1k
views
Denied Data Subject Access Request (DSAR) due to third-party information
A while ago I made a data subject access request (DSAR, asking for personal information which is stored about me) which was part of an ongoing complaint. In a nutshell, I did a complaint to a company ...
- 231
8
votes
3
answers
5k
views
Why are websites like voter's records legal?
How is it possible that https://voterrecords.com/ can operate without any problems?
They reveal your personal information without your direct consent. Basically, you can find the address of anyone who ...
- 327
6
votes
3
answers
4k
views
What happens if someone dies without a trace?
So normally the police or hospital is called and people get a death certificate.
If someone disappears with no report, what happens? Is a death certificate ever issued?
- 1
6
votes
1
answer
2k
views
Is it illegal to fetch a picture from another phone remotely after having a consent Or prior Permissions?
Me and my girlfriend are using an app that takes the access of your partners phone camera, then clicks the image & sends image back to requester. After fiddling with it, we are planning to launch ...
- 61
6
votes
2
answers
1k
views
What is considered personal information according to the US law?
As a follow up question from this question a person's name, age, address, parties affiliation are considered public data.
I'd like to ask then what is considered personal information?
So if there is a ...
- 327
5
votes
1
answer
1k
views
UK: What information are the police legally required to collect when going door-to-door, and why?
A few days ago, a police officer knocked on my door in the evening and asked whether I had noticed any disturbances in my street earlier in the day - he said it was in relation to reports that they'd ...
- 175
5
votes
2
answers
144
views
Who can check sperm donor history in California?
Let's say Tom was a sperm donor in college. Now he is getting married. Can anyone besides Tom (e.g. Tom's wife) has access to Tom's sperm donation history? Can offspring/family of offspring have ...
- 569
5
votes
1
answer
175
views
GDPR rights of person who moves into the EU
Suppose that a person not resident (nor present) in the EU, say in Mexico, obtains services from a provider located in the US, and provides personal information in connection with those services, ...
- 114k
4
votes
3
answers
195
views
Can the GDPR be used to obtain US voting information
This grows out of a comment in the question Who Has the Right to Access State Voter Records and How May That Right be Expediently Exercised?
If a US citizen is currently resident in the EU, can that ...
- 114k
4
votes
1
answer
288
views
Can the corporation that I work for (I am not salary or a subcontractor) use my personal information & home address for business and billing purposes?
I have a corporate credit card that is utilized for business purposes at the location I work, which is not where corporate headquarters is.
Today the business/ billing address was changed by the ...
- 41
3
votes
5
answers
1k
views
Standards for data availability for internal employees
Our organization possesses a lot of personal data, and when we provide the data to external partners we are very strict on complying with all the data confidentiality rules, recommendations, etc. The ...
- 175
3
votes
1
answer
372
views
Under the GDPR in Germany, is a privacy-policy required when not tracking any personal data whatsoever
I have a small static personal website, where I publish some technical articles and my personal CV.
Do I need to include a privacy-policy if:
There are no (third- or first party) tracking services ...
- 33
3
votes
1
answer
134
views
If you execute your rights to erase personal data, is that destruction of evidence?
A is involved in a criminal activity, and the evidence lies with a 3rd-party service.
That service is subject to a statutory right to erasure provision (let's assume the proof is not data that legally ...
- 2,147
3
votes
1
answer
98
views
Can one person's genetic information be another persons personal information?
In the UK GDPR ‘personal data’ is defined as:
‘personal data’ means any information relating to an identified or identifiable natural person (‘data subject’); an identifiable natural person is one ...
- 8,612
3
votes
1
answer
219
views
Let's say a UK employer doesn't have a password policy - can they insist that an employee divulge a password used on a client's systems?
Purely a hypothetical scenario:
UK employer is an agency with various teams that provide services - some of which are digital - to a third party.
The employees create accounts on the third party's ...
3
votes
1
answer
186
views
(USA) Can reproduction of a public record be prohibited?
Partial image of what I suspect is a public record:
Is "reproduction prohibited" legally enforceable? That would make thousands of genealogists in violation, as well as sites like ...
- 814
3
votes
0
answers
52
views
Search engine data breaches, osint
Such a search engine that is deliberately created for the purpose of collecting open source information about security related incidents including data breaches and including a link to the source that ...
- 53
2
votes
3
answers
435
views
How can one not know their own legal marital status?
I saw this screenshot floating around for a California jury duty online questionnaire. Notice that "Not known" is a selectable option for one's marital status:
(image redacted)
I don't know ...
- 174
2
votes
2
answers
543
views
Is a bank account history of transactions considered personal data in the sense of GDPR?
For archival purposes, I'm trying to get the full history of transactions on my bank account since I opened it in 2019. I know my bank still has it since it's visible in the mobile app (I can scroll ...
- 121
2
votes
2
answers
159
views
Is analysis of personal data without saving considered data processing?
One of GDPR's main topics is processing data. Article 4 tells:
(2) ‘processing’ means any operation or set of operations which is performed on personal data or on sets of personal data, whether or ...
- 175
2
votes
1
answer
82
views
Should the client be informed every time when more personal data is requested under GDPR Article 13?
A SaaS company offers some services, which require registration. Its clients are notified about Terms of Service and Privacy Policy during the registration process.
Should the company send to the ...
- 125
2
votes
1
answer
95
views
Is "No data for that individual" personal information?
There are services that on presentation of identifying personal information (PI) provide further personal information. These include government data sources, credit reference agencies and fraud ...
- 8,612
2
votes
1
answer
103
views
Can privacy regulations prevent my alma mater from sharing the fact that I graduated there?
I graduated from some private high school a long time ago. During my years there, I have experienced and witnessed a variety of dubious practices that violate students' rights. I always wanted to ...
- 21
2
votes
2
answers
140
views
GDPR and personal data reselling
The situation is following:
I had an account in company A which then was sold to company B, both conduct online services.
I wasn't aware of this because I didn't log in to my account for several years,...
- 145
2
votes
1
answer
567
views
GDPR - Are the typical lists of examples for personal data misleading?
Article 4 of the EU GDPR states
‘personal data’ means any information relating to an identified or identifiable natural person (‘data subject’);
The explanation for the term ‘personal data’ as
...
- 123
2
votes
1
answer
341
views
Zipcar won't delete my driver's license from their records; are they legally required to?
I cancelled my Zipcar account 5 years ago.
Today I tried to re-open it. I created a new account, but it wouldn't allow me to because it said my driver's license was already in use.
I called customer ...
- 269
2
votes
1
answer
254
views
Comcast Xfinity CCPA Policy
I have an old login with Comcast under a relative’s primary (billed) account that I'd like to have deleted under CCPA. The relative lives in Florida, but I am a California resident. I'm attempting to ...
- 49
2
votes
1
answer
102
views
Legality of Credit Bureaus selling information without consent
I recently had a hard pull for a mortgage done (USA based). Since then, my personal phone number has been bombarded with calls and texts related to "better offers", despite being registered ...
- 450
2
votes
1
answer
113
views
Does failure to provide photo of face count as breach of GDPR in UK?
I have requested that an aesthetic clinic send me the 'before' images taken of my face before a procedure two times via email. They have ignored my requests while responding to other questions in the ...
user42151
2
votes
1
answer
204
views
What legal actions can we take for website that doesn't remove PII upon requests?
A business directory listing website scraped old data for their listings. They use random contact information, personally identifiable information (PII), logos/banners to falsely represent those ...
- 338
2
votes
0
answers
30
views
Personal data protection act in Malaysia
Does the Personal Data Protection Act in Malaysia include location data such as GPS data?
What kind of policies and regulations need to be considered when a company tries to process the customer's ...
- 27
1
vote
2
answers
172
views
Does a company have an obligation to attempt to answer a GDPR request if the requestor may not have provided sufficient identification information?
An individual has asked to provide information on his personal data which is stored by a company (GDPR). He has only provided his name and surname. He has signed the document electronically, i.e., we ...
- 175
1
vote
1
answer
141
views
Can computer performance metrics be personal data?
ScorecardResearch is a major data collection organisation that serves code onto some major UK web sites. Their privacy policy mentions a lot of tracking, including "hardware or device ...
- 8,612
1
vote
1
answer
76
views
What does "reasonable and proportionate" mean wrt GDPR SAR ID requirements?
When one makes a GDPR Subject Access Request (SAR) the data controller should confirm that the request is really coming from the data subject. From here Recital 64 of GDPR states;
“The controller ...
- 8,612
1
vote
1
answer
106
views
Is satelite data personal data?
It is in the news that artificial intelligence (AI) has been applied to aerial photography to identify homeowners who have made unauthorised additions of swimming pools to their properties in France. ...
- 8,612
1
vote
1
answer
66
views
GDPR and Certification Check
Based in UK.
I manage a certification website that allows users to register an account and complete a course, before doing so they explicitly agree to the website's privacy policy and GDPR. The ...
- 111
1
vote
1
answer
126
views
What charges does one risk if they share personal pictures without permission?
This question was inspired by something I read on another Stack Exchange website.
Basically, Mr. Johnson works at a small company Good Company. His responsibility is to manage and organise the ...
- 377
1
vote
1
answer
99
views
Can one make a Subject Access Request of a telephone Communications Provider?
I have received a suspected scam telephone call. Searching the internet for the number I found that "phone block 247520 is operated by DIDWW Ireland Limited". Searching this I came across ...
- 8,612
1
vote
1
answer
118
views
Webhosts' legal obligations to remove publicly available content associated with specific IP addresses
Let's say one builds a website allowing users to post text content that is publicly available and searchable via the IP address of the users who submitted it. Would the owner of that website be ...
- 227
1
vote
1
answer
181
views
Under GDPR can a company give out the demographics of employees e.g. ethnic background without anonymising it?
If a client asks for the demographics of a company's employees e.g. female to male ratio or ethnicity. Does this have to be anonymised so it is compliant with the GDPR or can the names be revealed?
- 231
1
vote
1
answer
93
views
GDPR (and data protection laws in general) in regard to non-commercial, personal database
(this is the closest StackExchange site I could find, even so, I'm sorry if the Q is still a bit out of place).
So, I've just finished building an application for better handling some of my needs and ...
user43325
1
vote
1
answer
36
views
Does a company have to disclose a data breach as part of the agreement with the SEC to be publicly traded?
If I run a publicly traded company that's releasing hardware and that hardware is compromised and customer data is harvested, do I have to publicize that leak's existence? What if the people that ...
- 2,247