Stack Exchange Network

Stack Exchange network consists of 175 Q&A communities including Stack Overflow, the largest, most trusted online community for developers to learn, share their knowledge, and build their careers.

Visit Stack Exchange

Questions tagged [privacy]

For questions about freedom from unsolicited observation, or the collection, use and distribution of private information.

1
vote
1answer
107 views

In GDPR, who exactly are the processors and what do they have to do?

I thought the processor was just someone who processes all personal data on behalf of the controller, basically a simple substitute for some matters. But from what I read online it seems that a ...
1
vote
0answers
54 views

Legal Status of Selective Service Records Regarding Conscientious Objection

What is the legal status of conscientious objector forms in the US draft? Specifically, are records regarding specific individuals' conscientious objector applications subject to FOIA, and are they ...
0
votes
2answers
90 views

GDPR vs. Copyright for a recommendation letter

Spurred by a discussion on academia.se: suppose prof. X writes a letter of recommendation for her student mr. Y, and sends it to university Z through an on-line system. Then, the student mr. Y writes ...
7
votes
1answer
122 views

Can I request companies to give me all the data they have on me when I'm visiting a country in the EU?

I'm not a citizen of the EU, nor do I reside in the EU. But as a consumer, I welcome GDPR. It gives me some limited rights even though I'm not in the direct interests of the regulation. Anyway, if I ...
3
votes
0answers
66 views

Is it legal to use a surveillance system in the private area of a rented home?

I am renting a room in a shared house. On a couple occasions I caught the landlord entering my room without giving any notice. He had feasible excuses, like repairing the dresser in my room, but he ...
45
votes
2answers
6k views

Is requesting waiving the right to deletion of contributions against GDPR?

I just got one of those GDPR mails from gitlab.com, which pointed me to a Web page where I had to accept some terms and conditions. The same as everywhere, except this passage: (For GitLab ...
1
vote
1answer
101 views

Does GDPR apply to announcement/technical emails?

I work on a SaaS website offering both free, and paid subscriptions to B2C customers. On it, I collect statistics, and emails(subscribed and double-opt-in users only) As far as newsletters and ...
0
votes
1answer
29 views

Right to get a copy of information held on one by private company in Australia

Does anyone know what the law in Australia is with respect of getting copies of information held by Australian companies about oneself - particularly notes made by phone operators and recorded phone ...
1
vote
2answers
101 views

Can anonymized data be collected under GDPR without consent?

I am having an Android App in which I want to track the usage of the app. But the usage will not have anyone identity for eg. I would collect one user used my app for around 10 minutes but who is that ...
12
votes
4answers
597 views

What is the legal mechanism by which the GDPR might apply to a business with no presence in the EU?

My family has a small side business selling some things through the internet. As far as I know, we aren't likely to have any customers who are EU citizens, but it's certainly not outside the realm of ...
0
votes
1answer
171 views

Opt Out Consent under GDPR

I am having an Android App which uses certain service such as Analytics, Ad Networks. I am taking the consent from the user at when the app starts, i.e. before collecting any info. But there are ...
0
votes
1answer
61 views

Data Subject Rights under GDPR

I am having an Android App which uses Advertising networks and other Analytics services. Now under the GDPR the data controller which is me in my case is required to provide some rights to the user ...
0
votes
1answer
64 views

GDPR: Detecting duplicate accounts in online services with customer data

If I have a game or some other online service I host in which: It is forbidden for a subscriber to hold more than one account, OR Even if it is not forbidden, to detect one person on multiple ...
3
votes
1answer
132 views

Should email addresses be anonymized/pseudonymized under GDPR?

GDPR states recommendation to pseudonymise or even anonymise Personal Data. A lot — most of — web sites and services require email address on signup. Should, from the Data Controller's point of view, ...
2
votes
1answer
72 views

Using Personal data before consent

I am having an Android App which is going to use some services such as Google Analytics, Firebase etc. I have a thought of having two different consent screens for different region user such as EU ...
0
votes
1answer
70 views

Website Privacy Policy: Include link to internet host's policy?

Why don't most privacy policies include links to the privacy policy of the company that is hosting the website?? One would think that that given all the data that the host collects, that would be ...
5
votes
3answers
169 views

Is it illegal to intentionally design a social network that can't comply with right-to-be-forgotten (and possibly other laws)?

If I intentionally design (and program) a social network that uses a technology (blockchain,...) which does not allow for alteration / erasing of user data, what happens in case of a right-to-be-...
7
votes
4answers
1k views

GDPR: are faces always considered identifiable information?

Machine learning research into facial recognition and processing (e.g. emotion detection) often makes use of datasets containing large numbers of facial images. These are usually anonymised, so that ...
3
votes
1answer
57 views

GDPR - Is having a PDF with fields to fill out classed as data?

I have a website which has a link to a PDF form which users can print out and fill in. I'm wondering if somewhere I need to a statement in my privacy policy which justifies this?
1
vote
1answer
277 views

GDPR - What's classed as an opt in for Google Analytics cookie and do I need to do it?

I'm wondering if anyone can shed any light on this for me please. I've been doing alot of research about GDPR lately and how it is going to effect my websites using Google Analytics. From what I can ...
11
votes
6answers
3k views

Legality of online publishing of public records containing home addresses of large #'s of people?

Suppose that: (1) a person living in Washington state receives a large number of documents from a public records request, each containing names and mailing addresses (for hundreds of thousands of ...
0
votes
1answer
42 views

Force third party to delete ssn from database

I erroneously gave my ssn to a recruiter working for a tech recruitment company. They asked for it because they needed it to post me for a bank job. At least that's what they claimed. Long story ...
9
votes
3answers
644 views

GDPR - Withdrawn user consent

I have been reading alot about user consent management according to the GDPR and one problem I can't see solved anywhere is managing withdrawn consent. The user gives his consent to use his data and ...
3
votes
1answer
494 views

User consent required under GDPR

I am having an Android app which uses certain Analytics services such as Google Analytics, Firebase etc. These services collect certain information from the user. For this reason I have drafted a ...
2
votes
0answers
91 views

Is recording of other people in a work context without permission legal in Romania?

I am shortly going to Romania to perform an IT Audit. As an auditor, we often have to deal with people who become hostile towards us. For my own protection, in the United Kingdom I always video ...
-1
votes
1answer
154 views

How should I notify Human Resources of revocation of consent to a background check?

I submitted consent for the purpose of background check to a very established organization, which outsourced the process of background checking to another organization. Let's call them HireWrong. ...
4
votes
1answer
855 views

Germany: Does a github.io hosted site require imprint / data privacy statement according to the GDPR?

github offers free publicly accessible data storage. Many people use that to present their personal profile where they e.g. advertise for freelancing services. An example url could be http://username....
0
votes
3answers
59 views

What information about a person are private and what are public?

What information of a person I may write on my web site without special permission from that person? Lets take 'Steve Jobs', you can find a lot of websites where you can find date of birth, name, ...
3
votes
1answer
106 views

What is the punishment for misusing Aadhar card details in India.?

Some unknown person created an online account with my Aadhar card details and booked a room with that account. I guess the person is the PG owner to whom I gave my Aadhar card to photocopy as proof ...
1
vote
2answers
73 views

Can my user agreement require end users to indemnify me for misuse of their data by third-party services embedded in my app?

I have an Android App which is already in the Play Store. Now due to GDPR I am planning to improve my Privacy Policy and a Terms of service. I am planning to add certain terms in my Terms of service ...
2
votes
1answer
121 views

Is a security guard at an IRS office legally allowed to demand to see my cell phone?

This is sort of related to this other question but in this case it is about a cell phone and about entering a government (IRS) office. I visited an IRS field office in Worcester (Massachusetts, USA) ...
4
votes
1answer
587 views

How does the CLOUD Act apply for non-US persons' data stored on US-owned servers outside the USA?

The Clarifying Lawful Overseas Use of Data Act or CLOUD Act (H.R. 4943) was signed into law on March 23, 2018. The law became necessary because the previous legislation in the Stored Communications ...
3
votes
2answers
138 views

GDPR liability for Web Designer

I am a web designer that works with a range of clients on a project basis. I complete a project and then offer my services at any hourly rate for any other work required in the future. Do I have a ...
0
votes
1answer
141 views

Is it illegal to use a proxy chain in the UK?

As you are all aware about the whole Facebook fiasco.... I am now wanting to be as anonymous as I can online, one method I found was to use a proxy chain. I am just wondering if it is legal in the UK ...
1
vote
0answers
151 views

Is it legal to track a scammer's IP address?

One of my contacts has messaged me asking for help about a scam. He was saying that one same person keeps harassing him with scam messages threatening to put some videos of him online if he doesn't ...
3
votes
2answers
114 views

Would public chat servers be considered public spaces or communications, for recording purposes?

By this definition, a public place is generally an area, whether privately or publicly owned, to which the public have access by right or by invitation... but not a place when used exclusively by ...
1
vote
1answer
284 views

Is there a UK equivalent to the USA's FERPA?

The Family Education Rights and Privacy Act (FERPA) describes rights students have to their private records in the United States. Is there an equivalent for students in the United Kingdom?
0
votes
1answer
111 views

How does one exercise their GDPR related rights?

In May, GDPR will become effective and have a global impact on how personal data is handled. Article 20 of the GDPR requires complying systems provide Data Portability. If a European citizen was to ...
5
votes
2answers
216 views

What legal reason is there to publicize Michael Cohen's client list?

As a lay person I'm a little shocked at the proceedings with the Michael Cohen raid, as it clearly has some issues with attorney client privilege. While it may have bearing on the court case, and I'...
3
votes
1answer
74 views

Does the FTC Act of 2006 require utility companies to verify an account holder's identity?

The gas company wanted me to give them my SSN to start service. Naturally, I refused. I was told that they were required by law to verify my identity, and offered me the alternative of submitting a ...
1
vote
2answers
91 views

Is it legal to ask someone their birthday in an interview?

I'm applying for a job where they want a lot of personal details from me. The HR rep specifically asked me for my birth date. I heard this is illegal, is it true? If relevant, the question was asked ...
1
vote
1answer
63 views

Can a student send a personal email on school campus without scrutiny by administration?

Is the following scenario legal Let's say that there is a student A, who sends student B in a personal email but on school campus and on school wifi. Student A's email includes derogatory description ...
0
votes
1answer
86 views

Can I build an iPhone app that generates cryptocurrency income without the user's consent or knowledge?

I had an idea of an iPhone app but I'm not sure if the methods are entirely legal, for that reason I thought id come here to ask. Where I live in Canada it can get pretty cold so I had the idea of ...
0
votes
1answer
193 views

Is it legal to make an audio recording in a United Kingdom workplace with one party consent [duplicate]

My office it's very loud. I complained to my line manager and as a proof I have recorded a few seconds of this noisy environment. At the time of recording there were other colleagues in the room. My ...
1
vote
1answer
167 views

Is it illegal for a search engine to not provide an option to opt out of saving search history?

Currently Bing search has no option unlike Google search to opt out of saving history. Although Bing search can be set to not save history, it still saves the history of the user in the Microsoft ...
1
vote
1answer
34 views

Privacy Policy for email contact form

I'm building a web page that does not have any sort of registration/login. The only bit of user data is a contact form that allows the user to contact the owners of the page. This contact form asks ...
0
votes
1answer
30 views

What is the process of requesting collected personal information for a major company online?

Recently I took a personal trip to a resort and theme park a large company owns in the US. As a US citizen, I have the right to request any and all personal information digitally and physically ...
6
votes
1answer
2k views

Are chat logs against the new european GDPR?

Is keeping logs of chats (e.g. IRC, in this specific case Twitch chat) against the new European General Data Protection Regulation? I know you can't save data which can be linked to a natural person ...
2
votes
1answer
89 views

Does the failure to honour an express refusal invalidate prior claims of having implied consent?

Suppose a local health district (LHD) has used a patient's electronic medical record (eMR) for training purposes. Upon learning that they have done this, the patient is displeased and tells them so. ...
5
votes
1answer
1k views

Can a doctor/nurse legally force me to take a drug test?

I am in California, and had an appointment today to establish care with my new doctor. The nurse checking me in noticed my high blood pressure and sores on my face from psoriasis, both conditions ...