Questions tagged [privacy]

For questions about freedom from unsolicited observation, or the collection, use and distribution of private information.

1
vote
0answers
18 views

User privacy policy when visiting page on Amazon S3

I have a static webpage that advertises my mobile app for the App Store. The page is stored on an Amazons S3 bucket. It has no ads and doesn't use cookies. Do I still need a privacy policy, because I ...
1
vote
0answers
40 views

In Victoria Australia can you stand out the front of somebody's house and record what is happening inside?

Generally, in Victoria Australia, anything that occurs in public is open to being recorded by anyone (To my knowledge). However, if you take a video camera or camera phone and aim it through the ...
3
votes
2answers
1k views

Do the GDPR and Cookie-Law regulations apply to localStorage?

We use the localStorage API to store information about the login data to keep the user logged in through various sessions (we do not store personal information), furthermore the localStorage data is ...
5
votes
1answer
135 views

Does a person have legal recourse if a drone is trespassing

I have a 10 foot privacy fence around my property. There are no trespassing signs on all four sides. One of the neighbors keeps flying a drone over my yard like they are casing the place. Do I have ...
0
votes
1answer
60 views

How can I provide proof of residency [closed]

So I am moving to another state (pooler, Ga.) and I need to enroll My son into school. I would need to provide proof of residency But I will be staying with my mother in law until I get more familiar ...
0
votes
1answer
194 views

Is it legal to make an audio recording in a United Kingdom workplace with one party consent [duplicate]

My office it's very loud. I complained to my line manager and as a proof I have recorded a few seconds of this noisy environment. At the time of recording there were other colleagues in the room. My ...
1
vote
1answer
280 views

GDPR - What's classed as an opt in for Google Analytics cookie and do I need to do it?

I'm wondering if anyone can shed any light on this for me please. I've been doing alot of research about GDPR lately and how it is going to effect my websites using Google Analytics. From what I can ...
0
votes
1answer
119 views

No gun zone and knock and talk

Recently i passed by a large local mosque. The mosque property was posted "No Gun Zone" at the property boundaries. If a resident posted such signs on their property then missionaries, delivery ...
4
votes
1answer
592 views

How does the CLOUD Act apply for non-US persons' data stored on US-owned servers outside the USA?

The Clarifying Lawful Overseas Use of Data Act or CLOUD Act (H.R. 4943) was signed into law on March 23, 2018. The law became necessary because the previous legislation in the Stored Communications ...
1
vote
2answers
51 views

Sharing confidential information between two companies

I own a small company and submitted a proposal to a major company and I received no response. Another company considered my proposal and invited me to present the proposal to the board. I was asked ...
8
votes
3answers
678 views

Is it legal to record conversations with police?

If I am stopped by the police for questioning on the street, would I be within my rights to record the conversation on my phone to avoid any looseness with accounts of what was said on either side? ...
3
votes
1answer
101 views

Can you selectively consent to searches?

Often I'll go for takeout and they'll hand me my food in an paper bag. There's nothing wrong with this, but I tend to feel suspicious walking down the street with this unmarked brown paper bag. If a ...
0
votes
2answers
97 views

Peter Strzok's Text Messages [closed]

Strzok indicated in testimony that he did not think that his text messages would become public. I realize that FBI agents give-up a certain degree of privacy and rights (admirable). That being said,...
0
votes
2answers
109 views

How to remove an entry from Boston Herald database

A Boston Herald database posted information about government employees' salaries here. Can a person named in the database remove their entry?
3
votes
1answer
246 views

EU Cookie Law can I use cookies before users' consent?

I am trying to get my website to be EU Cookie compliant and I have encountered some plugins which have something called "implied consent" in other words a popup appears on the website saying something ...
1
vote
0answers
41 views

Do we need to show ID when we return items to the shop?

I was asked to show my ID when returning the item which I bought from their online shop. I brought it in to one of their shop in London to have my refund, however, they told me the card I used for the ...
2
votes
3answers
163 views

Do I have legal standing to force a website to remove my Personally Identifiable Information (PII)?

I recently learned a high school coach of mine used a website (athletic.net) to track meets, etc, and posted there is quite a bit of PII (full name, High school, graduation year, events competed in, ...
4
votes
1answer
860 views

Germany: Does a github.io hosted site require imprint / data privacy statement according to the GDPR?

github offers free publicly accessible data storage. Many people use that to present their personal profile where they e.g. advertise for freelancing services. An example url could be http://username....
2
votes
1answer
62 views

Removal of made public personal information. Privacy laws

There are many websites today which scrape and aggregate data. Are these laws protecting US citizens and/or New York state residents which ensure that, upon request, the information must be removed? ...
2
votes
4answers
255 views

Is it possible to refuse offering service to GDPR-protected customers?

Let's say I have a service that asks registration details from the user and for some reason I, as a provider of that service, can't comply to GDPR and therefore want to refuse registration of new ...
0
votes
1answer
66 views

Is it legal to collect reviews/ratings about people and show it on website?

There are websites which show reviews, ratings, scores about companies (restaurants, hotels, etc.). For example, I create a website which would collect similar data about concrete persons. Could a ...
0
votes
1answer
60 views

Is this service legal?

This service, "Find Email Free", offers to collect email addresses from its users, and then share them with the users. It seems not only morally wrong on several moral grounds, but also shockingly ...
0
votes
1answer
58 views

For GDPR compliance, what documents or contracts need to contain a list of processors or sub-processors?

Should a complete list of processors or sub-processors be written anywhere for GDPR compliance? If so, who is required to do so? Controllers, processors, sub-processors? And where should the list be ...
3
votes
1answer
358 views

Dirty Apartment 3 day notice to cure breach or quit San Diego, CA

I received a "Three Day notice to cure breach or quit" for a dirty apartment. It is dated Wednesday, but was left on my door Thursday at 9am. The landlord is coming over on Saturday before noon to ...
2
votes
1answer
55 views

Can a school district install video surveillance only for specific teachers?

Let's say a school district in the United States decides to install surveillance cameras (possibly with audio) in classrooms, but only in the classrooms of specific teachers. Gen Ed teachers might be ...
0
votes
2answers
103 views

Privacy concerns regarding my data on a website

Recently, I signed up on this website. As soon as I registered, they sent me an activation email. After seeing the activation email, I was a little disturbed. The activation email consisted of the ...
4
votes
0answers
41 views

Is Google's privacy policy compliant with GDPR for the data processing agreement between a controller and a processor?

If for your job you use any Google services, chances are you are sending them a lot of personal data of your clients in emails, documents, etc. So technically you are the controller, and Google ...
6
votes
1answer
124 views

Can I have my personal information redacted from evidence in a case that doesn't directly involve me?

There is a case in the United States that has made its way through a city's municipal court, the district court, and is now going to be in the state's supreme court (Pennsylvania). I live in a ...
1
vote
2answers
122 views

Handling a GDPR subject access request when using google analytics?

When using Google Analytics and receiving a GDPR subject access request does the party receiving the request also have to send all data collected by Google Analytics?
1
vote
1answer
34 views

What prosecution can one expect for violation of information privacy principles in New Zealand?

I recently received a marketing letter in my mailbox from a building supplies company that I had never dealt with. Upon contacting them I found out that they had bought a database of people who had ...
4
votes
1answer
64 views

Can online business in one country deny access via terms of service to entities in another country?

Can an American company state in their terms of service that if an entity is from a designated country they are not allowed to use the service? In other words would that be a legal and enforceable ...
1
vote
1answer
96 views

Facebook blocked my account until I consent to their new privacy policy under GDPR. If I consent now, will I be able to withdraw my consent later?

I am going to delete my Facebook account in a month, I can't do it now because I still use it for work. I live in the EU and Facebook has blocked access to my account unless I accept their privacy ...
3
votes
2answers
138 views

Can the terms of service contain a clause that instructs a user to forfeit their rights under the GDPR?

Suppose an American company wishes to do business with European parties. Could their terms of service say that as a user of their services the user forfeits any rights afforded to them by the GDPR ...
7
votes
1answer
123 views

Can I request companies to give me all the data they have on me when I'm visiting a country in the EU?

I'm not a citizen of the EU, nor do I reside in the EU. But as a consumer, I welcome GDPR. It gives me some limited rights even though I'm not in the direct interests of the regulation. Anyway, if I ...
3
votes
1answer
83 views

Strata corporation installing keyless entry system and logging entrance times/dates

My concern is the strata is forcing people to sign for specified id numbers this information is then stored so they know who enters the building when and how often. I am an owner and I believe I ...
1
vote
1answer
107 views

In GDPR, who exactly are the processors and what do they have to do?

I thought the processor was just someone who processes all personal data on behalf of the controller, basically a simple substitute for some matters. But from what I read online it seems that a ...
1
vote
0answers
54 views

Legal Status of Selective Service Records Regarding Conscientious Objection

What is the legal status of conscientious objector forms in the US draft? Specifically, are records regarding specific individuals' conscientious objector applications subject to FOIA, and are they ...
0
votes
2answers
92 views

GDPR vs. Copyright for a recommendation letter

Spurred by a discussion on academia.se: suppose prof. X writes a letter of recommendation for her student mr. Y, and sends it to university Z through an on-line system. Then, the student mr. Y writes ...
3
votes
1answer
133 views

Should email addresses be anonymized/pseudonymized under GDPR?

GDPR states recommendation to pseudonymise or even anonymise Personal Data. A lot — most of — web sites and services require email address on signup. Should, from the Data Controller's point of view, ...
1
vote
2answers
101 views

Can anonymized data be collected under GDPR without consent?

I am having an Android App in which I want to track the usage of the app. But the usage will not have anyone identity for eg. I would collect one user used my app for around 10 minutes but who is that ...
2
votes
1answer
471 views

Ask people for WhatsApp address book consent; what to do when declined?

I have first posted this question on Super User. Since I tagged it with Android (as I use WhatsApp on Android) it got migrated to Android Enthusiasts. There one decided that it was not on-topic for ...
45
votes
2answers
6k views

Is requesting waiving the right to deletion of contributions against GDPR?

I just got one of those GDPR mails from gitlab.com, which pointed me to a Web page where I had to accept some terms and conditions. The same as everywhere, except this passage: (For GitLab ...
3
votes
0answers
66 views

Is it legal to use a surveillance system in the private area of a rented home?

I am renting a room in a shared house. On a couple occasions I caught the landlord entering my room without giving any notice. He had feasible excuses, like repairing the dresser in my room, but he ...
7
votes
4answers
1k views

GDPR: are faces always considered identifiable information?

Machine learning research into facial recognition and processing (e.g. emotion detection) often makes use of datasets containing large numbers of facial images. These are usually anonymised, so that ...
1
vote
1answer
101 views

Does GDPR apply to announcement/technical emails?

I work on a SaaS website offering both free, and paid subscriptions to B2C customers. On it, I collect statistics, and emails(subscribed and double-opt-in users only) As far as newsletters and ...
0
votes
1answer
29 views

Right to get a copy of information held on one by private company in Australia

Does anyone know what the law in Australia is with respect of getting copies of information held by Australian companies about oneself - particularly notes made by phone operators and recorded phone ...
0
votes
1answer
174 views

Opt Out Consent under GDPR

I am having an Android App which uses certain service such as Analytics, Ad Networks. I am taking the consent from the user at when the app starts, i.e. before collecting any info. But there are ...
0
votes
1answer
64 views

GDPR: Detecting duplicate accounts in online services with customer data

If I have a game or some other online service I host in which: It is forbidden for a subscriber to hold more than one account, OR Even if it is not forbidden, to detect one person on multiple ...
1
vote
2answers
432 views

How can I get my DNA tested without the results being kept by third-party?

Mainly I'm interested in getting to know my ancestry, but I don't mind doing a lot of research on my own to classify it if I get raw results. The thing that I do not want is my DNA being stored ...
1
vote
2answers
73 views

Can my user agreement require end users to indemnify me for misuse of their data by third-party services embedded in my app?

I have an Android App which is already in the Play Store. Now due to GDPR I am planning to improve my Privacy Policy and a Terms of service. I am planning to add certain terms in my Terms of service ...