Questions tagged [privacy]
For questions about freedom from unsolicited observation, or the collection, use and distribution of private information.
0
votes
2answers
28 views
Do default Apache logs violate the GDPR?
Joe is a completely novice Web developer who sets up an Apache server on its defaults, which include collection of log files which basically say "this specific file was requested by this specific IP ...
2
votes
1answer
42 views
Legal sending personal information to a third party if the user supplied incorrect contact information?
To clarify the title, here is an example:
Alice wants to sign up to online store Nile.com
Alice enters the email bob@mailprovider.com by accident
Nile.com does not send a verification that Alice has ...
3
votes
1answer
61 views
Is it legal to compel users to share data in order to access more features, when the features being accessed do not require the data being requested?
Apologies in advance if this is not the correct exchange for this question.
I am a developer working for a company that owns a healthcare application. They operate exclusively in the EU.
As part of ...
1
vote
1answer
39 views
What information will be made public by CRT and for how long?
I would like to bring a case to the Civil Resolution Tribunal. I would like to know more about it's privacy. From there Information Access & Privacy Policy it appears the public can access just ...
1
vote
4answers
49 views
Which countries' law should be considered for Privacy Policy and Terms of Use in a localized website
Should a multi-language website have different privacy policy and terms of use content for the languages it implements?
Or is it just perfectly legal to have a mot-a-mot translation of the base ...
0
votes
1answer
33 views
Proof of Consent under GDPR, HOW TO?
One of GDPR Lawful Bases for Processing Personal Data (and that means Collect; Access; Store; Process and Share) is Consent.
Companies must have documented proof of Consent as per defined under GDPR ...
1
vote
1answer
24 views
Copy of ID card: blacken / hide fields that are not relevant (Switzerland)
In recent c't there is an article about GDPR (Sorry for the German). In Switzerland there is so far no GDPR, but we have a similar mechanism called Auskunftsrecht.
In article there is written that ...
0
votes
2answers
76 views
Are Steam account IDs (and telemetry data associated with Steam IDs) deemed personal data?
A few friends and were having an argument on the following situation:
People can sign up for Steam accounts for free, letting them purchase games and play games over their network. Users are able to ...
1
vote
1answer
72 views
Are you allowed to put a customer's email address in an internal business email?
Today at work I put a number of our customers' email addresses in an email that only people in the business were CCed on because we were dealing with a matter relating to these customers and their ...
-1
votes
3answers
57 views
What legal proof is valid for a user to complain under an online privacy policy
Now a days most of website like Bank,Social media,Financial service apps and almost all online service) when we signup or create online a/c or use some online services we need to select privacy policy ...
3
votes
4answers
82 views
Is a Blood sample considered Personal Data under GDPR?
Just that simple question:
Is a Blood sample considered Personal Data under GDPR?
1
vote
3answers
77 views
Is a public IP address classified as “personal data” for a third party under EU law?
Situation: an individual in the EU has a web site available on Internet (= if you are on Internet, you can connect to that web site). The IP addresses of the connections to this web site are stored in ...
0
votes
0answers
22 views
Is it required for web store to have database server located in Australia?
I have an online store.
I have been told that Certain privacy laws require documents to be stored on Australian shores.
What is exactly required and in what documents is it stated.
-3
votes
2answers
94 views
What legal charges could I face after this action?
So it seems I might have made a mistake.
It was sunday evening and I was hanging out with around 10 people aged between 16 and 26 (rough estimate). At one point I grabbed the phone of one of the ...
0
votes
2answers
85 views
Mass, commercial identification of people appearing in porn
Someone on the Internet claims (I'll call this person "the operator" below):
They have crawled around 100TB of data from both mainstream social networking sites, and porn sites with user-generated ...
2
votes
2answers
57 views
Do user-generated content and votes count as personal data under the General Data Protection Regulation (GDPR)?
Do user-generated content and votes count as personal data under the General Data Protection Regulation (GDPR)?
For example, on Stack Exchange, do the questions, answers, comments, messages and ...
3
votes
3answers
79 views
GDPR: Is giving out customer name and implied existence of customership legal?
I'm an employee (software developer) for a company that acts a data processor, and the company that is a client and data controller has requested a feature that I find questionable.
The purpose is to ...
0
votes
1answer
94 views
Divulging students' grades to third parties
In the U.S., I understand that it is illegal for teachers to divulge a student's grades to anyone with no legitimate claim to the information.
Is it similarly illegal for parents to do that?
In some ...
-4
votes
3answers
71 views
Are the irritating web site warnings about cookies an intentional consequence of European legislation?
It seems that in the last couple of years, it has become standard for web sites to have irritating pop-over notifications that their web site uses cookies “to enhance your user experience” or ...
1
vote
2answers
48 views
If we anonymize Google Analytics IPs do we still need to ask for Cookie consent? [duplicate]
Trying to figure out the most light weight way to have Google Analytics on a site without having to ask for cookie consent. If we turn on IP Anonymization do we still need to ask for consent?
If so ...
1
vote
0answers
54 views
To achieve ECTS credits at my school a student is forced to drop his/her right of privacy
Some background about the situation:
I attend a vocational university (university of applied sciences)
I live in the Netherlands - Europe
We have a mandatory activity that provides us with ECTS ...
1
vote
1answer
37 views
Does the GDPR mandate that web sites provide access to cookie settings?
Cross referenced this question with SO just to get more technical perspective
In this article it says with respect to:
Google Analytics and GDPR consent to cookies and tracking:
Based on a true ...
1
vote
2answers
48 views
Does CNNs cookie consent banner comply with the GDPR?
I just got done reading this cookie consent material and it says that we need to keep a record of cookie consent. It also says that the notification needs to allows users to opt in and out of ...
0
votes
2answers
53 views
How are the laws considering storing country details of visitors of my website? (calculated of their ip adresses)
I wanted to add the country of the people who left a review on a website but I was wondering how this regards towards the laws about privacy. I have been doing quite some research into this topic but ...
0
votes
2answers
77 views
Do mature minors have the right to privately consult with a medical professional?
The title should be relatively self-explanatory. Do mature minors (aged 16 or older) have a legal right to privately consult with a medical professional, free from the involvement of a parent, ...
3
votes
3answers
175 views
Landlord required to divulge tenant identity
A new law requires landlords to provide the following
information about their tenants:
Name
Who is "head of household"
Phone number
Age (approximate)
Then the tenant is required to go to the town ...
3
votes
3answers
124 views
Public record or PII
In the past, I had interactions via email with various boards of my town government. I recently noticed that printouts of these emails were scanned and added to the "meeting package" - a PDF document ...
1
vote
4answers
234 views
Can a one-time-pad provide legal immunity - (make data inadmissible) -?
IMPORTANT NOTE:
This question is quite niche, I am not sure if this stack is the most relevant place, please inform me if there is a better place for it.
To explain the question:
I am asking if, a ...
0
votes
1answer
84 views
Connecting to a Network Equals Consent?
We have been presented with a proposed license agreement that claims that connecting to our organization's WiFi network constitutes consent for them to perform surveillance and install spyware on our ...
2
votes
2answers
169 views
Can a neighbor point cameras at our backyard and the back of our house?
We live in the hills. And the way our neighborhood is designed is as you go up the hill, there will be a house below you, and a house above you (which are side by side to your property). The elevation ...
3
votes
1answer
61 views
How to make data brokers delete my information without providing more information? Can I take legal action?
I've been reading this terrifying list of data brokers after finding my information in a Google search result. I want to reach out to the "high-priority" data brokers and get them to remove me from ...
0
votes
1answer
83 views
Congress and Trump's Tax Filings [closed]
I am very interested in Congress subpoenaing the IRS for Trump's individual Tax Return for the last 6 years.
I realize they have oversight. But it would look to me as an one outside of the law ...
0
votes
1answer
70 views
What should happen if I ask Proxy / VPN provider about their service illegal use against me? [closed]
Let's say I am running a website that somebody is trying to hack, from the logs I got that he is using mostly VPN servers of X company.
So, even if the VPN company adverts themselves for being 100% ...
-2
votes
1answer
104 views
Is it legal for tax company to fail to protect my tax info from former spouse?
I file taxes with H&R Block. I divorced in 2016. My ex-spouse logged into H&R Block 4/13/19 and was able to view my 2016 and 2017 taxes. An H&R Block associate instructed me to contact ...
3
votes
1answer
110 views
'Right to be forgotten' denied due to insufficient identification
I registered for a free online service with fake data while being underage.
Years later I request to have the account deleted, using the e-mail address I registered with. However, to identify me as ...
1
vote
1answer
53 views
Is there a general business equivalent of “stage names” or “pen names”
And by that I mean: a situation where an individual can conduct their general business activities privately within a proprietorship under a fictitious "pseudonym" or via proxy? Though I'd imagine if ...
0
votes
2answers
42 views
Access to sensitive information of employees as a fellow employee
I'm a programmer who works closely with an engineering firm to create tools for the automation of business processes.
One of which I'm working on currently requires that have the access (although I ...
2
votes
1answer
59 views
Concealing Medical Conditions from Employer
If an employer asks an employee or prospective employee to fill out and sign a health declaration form (very common in the medical field) like this.
If the employee is afraid that revealing their ...
6
votes
1answer
917 views
Is it okay to store user locations?
I know it might sound quite bad. But here I explain the whole situation.
I'm developing a mobile application based on visiting different places. And I would store in some database (surely AWS) all ...
1
vote
0answers
21 views
EU Cookie Law: Consent required in addition to accepted privacy policy
According to iubenda [1], a cookie consent is required in mobile apps too, though I did not see many apps following this advice yet. The realization of such a cookie consent on web sites is typically ...
2
votes
1answer
40 views
Is it a violation of GDPR law to email personnel gathered from hunter.io?
I'm a web developer working on a project for a client. The project is a directory of sustainable companies (enviromental-friendly companies). The project is only launching now.
The companies listed ...
0
votes
0answers
35 views
Is it a breach of UK law to film without permission in a swimming pool? [duplicate]
At the leisure centre I work at I caught someone filming in a busy pool with a goPro.
I have been wondering whether this was merely a despicable and insensitive act on their part, or a straight up ...
1
vote
1answer
73 views
Is name and shame legal on Facebook?
On Facebook, there are various landlords communities. I have seen landlords post messages such as:
Do not rent your property to this person, first name, last name, how this person looks like and etc.
...
1
vote
1answer
75 views
Gawker vs. Hulk Hogan sex tape case and the 1st amendment
I'm a little confused about this case. Doesn't being recorded in your own home, or someone elses for that matter, require consent? Isn't there a reasonable expectation of privacy when you're not in ...
0
votes
1answer
56 views
Can a sysadmin ever read emails or PMs on his server, when secrecy of correspondence is in the constitution?
There is another question here that asks something similar, but apparently it refers to the US, where secrecy of correspondence doesn't seem to exist, at least according to this article on Wikipedia: ...
0
votes
0answers
60 views
How the California Consumer Privacy Act (CCPA) impacts a non-Californian business?
January 1, 2020, the California Consumer Privacy Act (CCPA) goes into effect.
The CCPA applies to any business anywhere in the U.S. or the world that does business in the state of California.
Could ...
3
votes
1answer
48 views
In case of using what communication channels a person does not have a reasonable expectation of privacy?
In what scenario(s) a person doesn't have a reasonable expectation of privacy?
sending a traditional letter or parcel via the U.S. post
using work email account for sending private emails
making a ...
2
votes
1answer
314 views
Is it illegal to masturbate inside public toilet behind closed door out of view from the public?
I suspect someone is doing that but it is hard to catch him because it is illegal to install surveillance camera in the toilet.
Putting that aside, is this act that should be done in private at home ...
1
vote
1answer
18 views
Is information only about financial transactions personally identifiable in terms of GDPR?
I am creating application where you can manage your incomes/expenses e.g. on eBay. Main functionality is:
create new item and specify price you've payed to get it
set price that you've
All other ...
4
votes
1answer
45 views
Should all gdpr related documents be translated to all official EU languages?
I wrote application localized in Ukrainian language , which is not one of the official European Union languages. Since I reside in the EU territory I need to comply with gdpr. This application is ...
