Questions tagged [privacy]
For questions about freedom from unsolicited observation, or the collection, use and distribution of private information.
505
questions
0
votes
2answers
45 views
What legal recourse do we have against Clearview AI's collection of our personal data and terrifying privacy policy?
TL;DR: how do we get the data this company collected on us without also giving them our government-issued IDs that they could potentially keep and tie to our "profiles"?
A week ago (January 25th), ...
2
votes
0answers
70 views
Can I hide my face from facial recognition and be fined for it?
I've been reading about the up and coming use of facial recognition by London's Metropolitian police service. I am aware there is no law against using facial recognition, but I am asking if there is ...
2
votes
0answers
74 views
Are banks in the US allow to publicly disclose the amount of the checks a bank customer is trying to cash in at the bank along with the customer name?
I read on https://abcnews.go.com/amp/US/black-man-sues-detroit-bank-alleging-racial-discrimination/story?id=68484056:
Gordon said a confidentially clause in his settlement with his former employer, ...
0
votes
0answers
12 views
Is a privacy policy required for storing user preferences?
I wanted to use localStorage (which I think technically counts as a cookie) to store a user's preferences in a simple web app. The stored data doesn't identify the user and is never sent to any sort ...
1
vote
1answer
53 views
Data retention for EU citizens travelling between UK and EU during Brexit transition/implementation period
Context:
I'm an EU citizen studying in the UK. When I travel to my home country in the EU (for example through a direct flight or by train), and then return to the UK, some of my personal information ...
0
votes
2answers
146 views
Institution can access my email (inbox/sent items/etc) and edit it?
First of all, I have thoroughly read the answers to the following questions and none of them answer my queries:
Can Google Chrome read/scan my ProtonMail inbox page?
Can my IT department read my ...
0
votes
0answers
35 views
What jurisdiction applies to invasions of privacy on social media? [duplicate]
Suppose user "M", a resident of Maine, posts on Facebook photos or other material that constitute invasion of privacy for user "W", a resident of Washington.
Suppose also that the assertion of ...
1
vote
1answer
39 views
Cookie opt-in required on paid-for web-based software-as-a-service application?
Context:
We provide a paid-for web-based software-as-a-service application. This application requires users to register an account, and agree to our terms & conditions and privacy policy to be ...
0
votes
2answers
33 views
Are documents generated by the patient part of psychotherapy notes under HIPAA?
HIPAA defines psychotherapy notes as follows (emphasis added):
Psychotherapy notes means notes recorded (in any medium) by a health care provider who is a mental health professional documenting or ...
1
vote
0answers
79 views
Are airlines allowed to publicly display the first few characters of the last name of their passengers taking a given flight?
I see that United Airlines publicly display the first few characters of the last name of their passengers taking a given flight.
Example from https://www.united.com/en/us/flightstatus/details/855/...
0
votes
0answers
30 views
Can I allow creation of a user profile without their knowledge?
I'm working on an app/website and I want to add functionality, which would allow current users create profiles for their friends and possibly connect these pages with the persons social network ...
1
vote
0answers
72 views
Am I required to hand out my private encryption key by german law?
I have posted a question over at academia.stackexchange.com (see [1]) which involves a legal question that may better fit here.
Context: I am a PhD student of a german university. Due to illness a ...
1
vote
1answer
45 views
Does a resume qualify as personally identifiable information relative to a privacy policy/tos?
A certain freelancer marketplace website based in Pennsylvania has allowed Google to index over 1000 user resumes. As we all know, resumes contain personally identifiable information. Their privacy ...
0
votes
0answers
61 views
Expectation of privacy for HDMI wall ports in coworking and library rooms
It is pretty common nowadays for study and conference rooms in public libraries and private coworking spaces to have big-screen TVs, which often feature HDMI input, which are often driven by some sort ...
0
votes
0answers
44 views
Is WhatsApp legally obligated to remove my chat on every device, based on the GDPR? [duplicate]
Dear Law StackExchange community,
I'm attempting to get chat history removed with another party dating back a long time ago. I don't want the chats to remain existent on any device whatsoever, so I ...
1
vote
1answer
38 views
What recourse does a patient have in the event of accidentally false medical records?
This story relates to my husband. He's 35 years old and had a vasectomy a few months ago. After the waiting period, he underwent the lab test to check that the procedure was successful. A few days ...
1
vote
0answers
53 views
Will China's new encryption laws affect electronics exported to the USA?
China is about to roll out a new encryption law that will require the Chinese government "to seize all communications, data, and other information stored in electronic form that belong to foreign ...
0
votes
1answer
141 views
Right to be forgotten in US legal system. Practical approach for erasure?
As it commonly known, the right to be forgotten is a fundamental right in the modern informational society. It is the right of an individual to obtain erasure of his personal data from the online and ...
0
votes
0answers
35 views
Data Privacy: Should a user be allowed to change another users profile information?
In a SaaS platform, should users be allowed to change other users profile information (things like Name, Gender, Company they work for etc)?
What laws (US & EU) would give guidance either way? ...
1
vote
2answers
84 views
A member of Congress subpoenas phone records and then release them: does this violate any US Laws?
If a member of Congress (e.g. Representative Schiff) subpoenas phone records of people (which is allowed) and releases them directly (in a report) or indirectly (leaked to press). Does this violate ...
0
votes
2answers
79 views
Is it illegal to NOT store logs within the UK? (VPN related)
Introduction:
I co-run a VPN company. I have a few legal questions since our service has a strict NO-LOG policy enforced.
Question:
In the UK, it is illegal to store sensitive and private customer ...
-1
votes
1answer
61 views
Is there a legal way to opt-out of submitting fingerprints for professional licensing?
I am interested in taking the CPA exam. One of the requirements to take the test is have my fingerprints taken, ostensibly to verify my identity at the testing center. (https://nasba.org/blog/2008/01/...
0
votes
2answers
43 views
Legal issues regarding my personal information?
To keep it short, I’m an online personality and LLC. I keep my online life separate from my personal life for obvious reasons. However, I received an alarming message on my non-work account on ...
4
votes
1answer
82 views
Does the data protection european regulation (GDPR) apply to processing information obtained from business cards and conversations?
I work at a SME.
When we meet someone (either a potential customer or a potential partner) at an exhibition, meeting, conference, etc., we usually save that person's contact information and topic of ...
1
vote
2answers
39 views
Does California's Information Practices Act (IPA) of 1977 apply to individuals after death?
I'm in the midst of researching a person who was born in 1892 and died in 1969 in California. The subject has no living heirs.
I've requested documents from the California Department of Consumers ...
0
votes
1answer
116 views
Is loss prevention able to enter a dressing room while someone is changing?
I am a a fashion stylist in Los Angeles, CA. I often go to stores and shop for clients (and myself). Last year, I spent 100k at a Neiman Marcus.
Recently, a loss prevention person and an over ...
0
votes
0answers
28 views
Is it legal to promote activity on a mobile app with reward based contests?
I am planning to launch a social networking app where, for building an initial community of users, the primary motivation would be a rewarding contest. The contest would involve users earning points 1)...
2
votes
1answer
71 views
Can I switch my user's payment provider without their consent?
My company uses a payout provider that pays out money to our users. However we have decided to switch to a different payout provider and we are wondering how to inform our users. During this migration ...
0
votes
2answers
57 views
Is anonymous analytics data subject to GDPR?
I am reading the definition of "personal data" here https://gdpr-info.eu/issues/personal-data/. My understanding is that GDPR comes into play when information is about personal data.
Let's say there ...
1
vote
0answers
50 views
Deletion of Facebook messages
This question has been asked before, but it doesn't bring up several important points. As things currently stand, deleting a Facebook message only removes it from your inbox but the recipient still ...
2
votes
2answers
142 views
Why do so many YouTube channels ask people if it's OK to show them in their videos?
My understanding is that it's not illegal to film people in public where there can be no reasonable expectation for privacy. However, if that's the case, why do so many channels on YouTube ask people ...
2
votes
0answers
70 views
Can plastic surgery office deny removing your before pictures from your file?
I was a patient @ Evolution MD. It is a plastic surgery / med spa that offers various treatments. I had a genital bleaching done a month ago, some pictures where taken and I was informed it was for my ...
1
vote
1answer
68 views
Bill of Rights protection against mandatory vaccination?
Does the the "privacy" protection afforded by the Bill of Rights covers unwanted medical treatments, including unwanted drug taking, notably mandatory vaccines?
0
votes
2answers
63 views
privacy and (proxy) voting
X and Y are entitled to vote at a UK company's general meeting. Proxies are allowed and instructions are to be notified to the company office in advance of the meeting. Votes at the meeting are to be ...
2
votes
1answer
91 views
Is it a HIPAA violation for a dentist office to print a patient's password on paperwork?
Dentist office just printed my password (to their portal) on their paperwork.
Surely this is a HIPAA violation (or against best practices, HIPAA or otherwise).
Can anyone confirm if so and point me ...
2
votes
2answers
58 views
Definition of a Household or Device in the context of the California Consumer Privacy Act (CCPA)
The California Consumer Privacy Act (CCPA) applies to a business if it meets one of:
Has annual gross revenues in excess of twenty-five million dollars...
Alone or in combination, annually buys, ...
1
vote
1answer
105 views
Hypothetical question about Whistleblower Protection
Let's say a US non-government employment comes in contact with very sensitive unprotected information on the web. The information was gathered using opsint (Open Source Intelligence) there was no ...
1
vote
0answers
41 views
Does the European Convention on Human Rights protect from infringements arising as a result of exercising rights in conjunction?
I was reading the cases of Modinos v. Cryprus and Pay v United Kingdom, and am confused regarding the interaction of Article 8 private life & Article 10 freedom of expression.
In Modinos v ...
0
votes
1answer
53 views
GDPR on Proxy Users
I believe I have a good overall understanding about the GDPR legislation, in terms of what needs to be protected, etc...
My questions here are about the scope of GDPR.
Does GDPR apply to people who:
...
0
votes
1answer
98 views
Is there precedent of secret subpoena that compels government access?
Under what guise of law, would state actors (UK, US, etc.) be able to issue secret (unpublished) subpoenas that require industry / utilities to provide government access to their systems? Examples of ...
0
votes
0answers
83 views
GDPR IFrame Cookies - Opt-In necessary?
A lot of googling didn't help me with the following questions:
Given I own a website which only creates one cookie that identifies a users session - is it okay to embed said website in an iframe ...
0
votes
0answers
19 views
Can the employer fully access employee data according to Norway's law?
The computers at the company I work for recently show the message below during log on.
This computer system is the property of Company. It is for authorised
use only. All activities conducted on ...
1
vote
3answers
104 views
Can the employer fully access employee data according to EU law?
The computers at the company I work for recently show the message below during log on.
This computer system is the property of Company. It is for authorised
use only. All activities conducted on ...
1
vote
2answers
67 views
Can governments require administrators of groups on social media platforms to buy licenses?
The Kenyan government now wants administrators of WhatsApp groups and other social media platforms to pay for licenses. Is this possible with the GDPR, Facebook privacy policy, etc., as the proposed ...
2
votes
1answer
107 views
Under GDPR EU law, can I sue big tech companies (Facebook, Google, Apple) for acquiring and storing my personal data without my consent?
Many of my friends have social media accounts (Instagram, Facebook, etc.) where they regularly post photos of them and where occasionally I appear in them.
Many of my friends have their personal ...
0
votes
0answers
7 views
Providing an address list app and Privacy Policy Issues
I'm building an app which provides an avenue for users to store information on people particularly addresses and country of origin. The app will be an online service where all data are stored in our ...
1
vote
1answer
139 views
What can i do if my GDPR requests are being ignored?
I have requested my personal data removal from one shady company that has gotten to my email somehow.
They said they've complied, but i am still getting newsletters from them.
What can i do as a ...
1
vote
2answers
144 views
Is it illegal to test someones abandoned DNA in the United States?
Let's say I suspect my friend (or spouse) has Huntington's disease. If I were to take their used tissue out of the garbage can and test it for Huntington's disease, would that be illegal?
1
vote
1answer
44 views
Is sending log data + customer name + location compatible with data privacy and GDPR?
I've written an updater program. Our customer downloads it to update our software with database. It would be helpful if we would know who has already updated our software. For this purpose I've added ...
2
votes
1answer
52 views
Public WiFi - when do you have to delete stored user data?
Note: I originally thought of this for germany, but if you have examples from other countries those are also welcome, since im interested in the topic in general.
So lets say im using a public WiFi, ...
