Questions tagged [privacy]

For questions about freedom from unsolicited observation, or the collection, use and distribution of private information.

Filter by
Sorted by
Tagged with
1 vote
2 answers
335 views

Is anonymous analytics data subject to GDPR?

I am reading the definition of "personal data" here https://gdpr-info.eu/issues/personal-data/. My understanding is that GDPR comes into play when information is about personal data. Let's say there ...
user3219798's user avatar
1 vote
0 answers
219 views

Deletion of Facebook messages

This question has been asked before, but it doesn't bring up several important points. As things currently stand, deleting a Facebook message only removes it from your inbox but the recipient still ...
user27343's user avatar
  • 528
5 votes
2 answers
362 views

Why do so many YouTube channels ask people if it's OK to show them in their videos?

My understanding is that it's not illegal to film people in public where there can be no reasonable expectation for privacy. However, if that's the case, why do so many channels on YouTube ask people ...
user27343's user avatar
  • 528
2 votes
0 answers
479 views

Can plastic surgery office deny removing your before pictures from your file?

I was a patient @ Evolution MD. It is a plastic surgery / med spa that offers various treatments. I had a genital bleaching done a month ago, some pictures where taken and I was informed it was for my ...
Alessia's user avatar
  • 21
1 vote
1 answer
195 views

Bill of Rights protection against mandatory vaccination?

Does the the "privacy" protection afforded by the Bill of Rights covers unwanted medical treatments, including unwanted drug taking, notably mandatory vaccines?
curiousguy's user avatar
0 votes
2 answers
167 views

privacy and (proxy) voting

X and Y are entitled to vote at a UK company's general meeting. Proxies are allowed and instructions are to be notified to the company office in advance of the meeting. Votes at the meeting are to be ...
jhnc's user avatar
  • 133
2 votes
1 answer
112 views

Is it a HIPAA violation for a dentist office to print a patient's password on paperwork?

Dentist office just printed my password (to their portal) on their paperwork. Surely this is a HIPAA violation (or against best practices, HIPAA or otherwise). Can anyone confirm if so and point me ...
cf512's user avatar
  • 21
2 votes
2 answers
132 views

Definition of a Household or Device in the context of the California Consumer Privacy Act (CCPA)

The California Consumer Privacy Act (CCPA) applies to a business if it meets one of: Has annual gross revenues in excess of twenty-five million dollars... Alone or in combination, annually buys, ...
Cedric's user avatar
  • 23
4 votes
2 answers
326 views

Hypothetical question about Whistleblower Protection

Let's say a US non-government employment comes in contact with very sensitive unprotected information on the web. The information was gathered using opsint (Open Source Intelligence) there was no ...
Windwalker33713's user avatar
2 votes
1 answer
81 views

Does the European Convention on Human Rights protect from infringements arising as a result of exercising rights in conjunction?

I was reading the cases of Modinos v. Cryprus and Pay v United Kingdom, and am confused regarding the interaction of Article 8 private life & Article 10 freedom of expression. In Modinos v ...
JosephG's user avatar
  • 255
1 vote
1 answer
348 views

GDPR on Proxy Users

I believe I have a good overall understanding about the GDPR legislation, in terms of what needs to be protected, etc... My questions here are about the scope of GDPR. Does GDPR apply to people who: ...
Nuno's user avatar
  • 1,033
0 votes
2 answers
206 views

Is there precedent of secret subpoena that compels government access?

Under what guise of law, would state actors (UK, US, etc.) be able to issue secret (unpublished) subpoenas that require industry / utilities to provide government access to their systems? Examples of ...
gatorback's user avatar
  • 7,205
0 votes
0 answers
682 views

GDPR IFrame Cookies - Opt-In necessary?

A lot of googling didn't help me with the following questions: Given I own a website which only creates one cookie that identifies a users session - is it okay to embed said website in an iframe ...
roookeee's user avatar
  • 101
1 vote
3 answers
580 views

Can the employer fully access employee data according to EU law?

The computers at the company I work for recently show the message below during log on. This computer system is the property of Company. It is for authorised use only. All activities conducted on ...
Raf's user avatar
  • 113
1 vote
2 answers
78 views

Can governments require administrators of groups on social media platforms to buy licenses?

The Kenyan government now wants administrators of WhatsApp groups and other social media platforms to pay for licenses. Is this possible with the GDPR, Facebook privacy policy, etc., as the proposed ...
griffins's user avatar
  • 113
2 votes
1 answer
168 views

Under GDPR EU law, can I sue big tech companies (Facebook, Google, Apple) for acquiring and storing my personal data without my consent?

Many of my friends have social media accounts (Instagram, Facebook, etc.) where they regularly post photos of them and where occasionally I appear in them. Many of my friends have their personal ...
gota's user avatar
  • 121
1 vote
1 answer
303 views

What can i do if my GDPR requests are being ignored?

I have requested my personal data removal from one shady company that has gotten to my email somehow. They said they've complied, but i am still getting newsletters from them. What can i do as a ...
user151496's user avatar
1 vote
2 answers
232 views

Is it illegal to test someones abandoned DNA in the United States?

Let's say I suspect my friend (or spouse) has Huntington's disease. If I were to take their used tissue out of the garbage can and test it for Huntington's disease, would that be illegal?
Paul's user avatar
  • 119
1 vote
1 answer
69 views

Is sending log data + customer name + location compatible with data privacy and GDPR?

I've written an updater program. Our customer downloads it to update our software with database. It would be helpful if we would know who has already updated our software. For this purpose I've added ...
user1673665's user avatar
2 votes
1 answer
165 views

Public WiFi - when do you have to delete stored user data?

Note: I originally thought of this for germany, but if you have examples from other countries those are also welcome, since im interested in the topic in general. So lets say im using a public WiFi, ...
Flying Thunder's user avatar
1 vote
0 answers
72 views

Is it obligatory to store ToS and Privacy Policy consent for a web app?

I've been trying to find if it's obligatory to store in a database the consent given by an user regarding the ToS and Privacy Policy, but at best what I can find is sentences saying "should". So my ...
user27419's user avatar
3 votes
0 answers
73 views

If i run a VPN service (paid) in the UK, do i by law have to keep logs?

So i want to start my own VPN company. Already have it setup and working etc but i'm based in United Kingdom (my servers are based in US though). Because i am based in the UK, i know that law ...
Bob's user avatar
  • 31
1 vote
0 answers
52 views

Does a GP sending patient info to a hospital without asking for consent violate medical ethics?

So, let’s say that you went to a General Practitioner (GP) about some pain, got some tests done, and they told you that you were fine; all the tests came back normal. Then, some time later, they look ...
nick012000's user avatar
  • 1,707
0 votes
1 answer
495 views

Is it legal to hire a Private Investigator in Korea? If not, what's the closest alternative?

I'm writing a story and I'm asking for factual accuracy in the storyline. (Not asking for suggestions in hiring an actual PI.) I know for a fact that it's now illegal in Korea to hire a Private ...
BeardWix's user avatar
  • 111
1 vote
1 answer
438 views

If I have access to some else's Whatsapp, can I use it as evidence?

I have a client who asked me the following question. Her husband gave her access to his Whatsapp as a trust exercise. She then used it to open Whatsapp web on her computer and follow the ...
Adrian's user avatar
  • 13
1 vote
1 answer
184 views

Consequences of blank check on privacy policy?

Some websites intentionally hide access to privacy policies and terms & conditions they require users to agree to. For example, consider the Hotel De Anza. If you click through the steps of the ...
WBT's user avatar
  • 4,878
0 votes
4 answers
192 views

Data Protection Laws

Some Co-workers of mine have been sending customer's personal information, that includes banking details through unsecured plaintext emails. This feels to me like it is definitely breaking laws/...
Jon.G's user avatar
  • 53
1 vote
0 answers
149 views

Replace User ID with pseudonym, still need consent?

I use a service called Matomo (as opposed to Google Analytics) so that I can own the data collected, and I thought they were better in regards of user privacy. My goal is to avoid collecting any ...
howtopythonpls's user avatar
0 votes
1 answer
167 views

United States HIPAA and New Zealand HISO from outside these countries

We are developing a software product for storing and managing health records in Australia, with the software product primarily targeted towards Australian healthcare organisations. This requires us to ...
AdrianGW's user avatar
0 votes
2 answers
681 views

Storing chat messages in a private database with user consent

The Situation I am currently creating a Telegram bot for me and some friends that stores all chat messages we send in our group chat in a database so that we can retrieve advanced chat statistics. I ...
Snowfire's user avatar
1 vote
1 answer
43 views

Am I responsible of the personal data of a second degree user according to GDPR

Suppose we have an flight ticket booking system. As with many of these systems the account booking the ticket doesn't have to be the one using the ticket (i.e. you can book for someone else the ticket)...
Radu - Andrei Coandă's user avatar
4 votes
2 answers
124 views

Opting out of cookies by emailing a company

Is it legal for a company, which serves customers in the EU as well as elsewhere, to say in its privacy policy that you can opt out of analytical and marketing cookies by emailing them? Rather than ...
Mark Fisher's user avatar
3 votes
2 answers
5k views

Can a family member break into my room and can I take legal actions against it?

Here is the situation. I still live with my family like my brother (we are both of legal age) . We never had a good brother relationship. We always try to avoid each other as best as we can. In the ...
Jeff's user avatar
  • 31
1 vote
1 answer
76 views

Forgery of video [closed]

I am 79 years old and a resident of a four storey building in NSW, comprising of 26 units. The multi-millionaire Chairman of our building's Strata Committee, who lives in the fourth floor’s penthouse ...
user26932's user avatar
-1 votes
1 answer
378 views

Forcing a person to remove a picture of me

I was riding home on the bus from summer school. A girl and I had a debate and she ended up frustrated and moved seats. The girl then started taking pictures of me. When I told her to stop, she ...
Aidancrash's user avatar
0 votes
1 answer
107 views

When does medical privacy start?

In a conversation between, say, Alice and Bob, if Bob shares his medical history with Alice, under which conditions is this information considered private medical information? If Alice is a ...
Mowgli's user avatar
  • 506
2 votes
2 answers
2k views

Can text message be used against me in court

My daughter's father has petitioned the court for custody modification and is using text messages he downloaded against me. The text messages in question were not sent to him but, rather, were ...
jacqueline trapp's user avatar
2 votes
2 answers
152 views

Is internet tracking "public info" for insider trading purposes?

Suppose I own a search engine. I look at my server logs and see that the query "how to fix exploding engine" is very popular in the area around Tesla headquarters. Would it be legal to act on this ...
actually_larry_page's user avatar
1 vote
1 answer
98 views

Is it illegal to state in your website that an employee of a company emailed you?

I have an open source project regarding software used in banking and I have received emails about it from employees working in top banks/consultancies. I am considering to mention this in the website,...
sen_saven's user avatar
  • 113
1 vote
1 answer
107 views

Private company making it hard to delete customer's personal data

Storyline A friend of mine opened an account with an online company that sells picture prints. Without her knowing, just after signing in, somehow (she did not understand how; probably through the ...
Remi.b's user avatar
  • 145
0 votes
2 answers
197 views

Is it legal for a private business to require contact information to complete a checkout?

We were in a counter-service restaurant today. When we went to pay, their checkout system required a telephone number and email address. We asked if we could opt-out and just pay, and were told that ...
zje's user avatar
  • 101
-1 votes
1 answer
83 views

How much can privacy concerns ignore danger?

Cell phone companies generally help police get the location of a missing person if there is some reasonable suspicion of danger. Is there any cell phone company (in any country) which values privacy ...
bobuhito's user avatar
  • 993
-2 votes
2 answers
239 views

GDPR no opt out option [closed]

Is it legal if we do not offer an explicit opt-out option in our app for non-persnonal data collection? We planned to explain to the user what data we collect and at the bottom of the screen there ...
Uranus's user avatar
  • 1
6 votes
3 answers
2k views

Do default Apache logs violate the GDPR?

Joe is a completely novice Web developer who sets up an Apache server on its defaults, which include collection of log files which basically say "this specific file was requested by this specific IP ...
WBT's user avatar
  • 4,878
2 votes
1 answer
159 views

Legal sending personal information to a third party if the user supplied incorrect contact information?

To clarify the title, here is an example: Alice wants to sign up to online store Nile.com Alice enters the email [email protected] by accident Nile.com does not send a verification that Alice has ...
VLAZ's user avatar
  • 125
4 votes
1 answer
156 views

Is it legal to compel users to share data in order to access more features, when the features being accessed do not require the data being requested?

Apologies in advance if this is not the correct exchange for this question. I am a developer working for a company that owns a healthcare application. They operate exclusively in the EU. As part of ...
former_employee's user avatar
1 vote
1 answer
105 views

What information will be made public by CRT and for how long?

I would like to bring a case to the Civil Resolution Tribunal. I would like to know more about it's privacy. From there Information Access & Privacy Policy it appears the public can access just ...
dutyanalysing's user avatar
1 vote
4 answers
150 views

Which countries' law should be considered for Privacy Policy and Terms of Use in a localized website

Should a multi-language website have different privacy policy and terms of use content for the languages it implements? Or is it just perfectly legal to have a mot-a-mot translation of the base ...
vahdet's user avatar
  • 145
2 votes
2 answers
484 views

Proof of Consent under GDPR, HOW TO?

One of GDPR Lawful Bases for Processing Personal Data (and that means Collect; Access; Store; Process and Share) is Consent. Companies must have documented proof of Consent as per defined under GDPR ...
Rui Freitas Serrano's user avatar
1 vote
1 answer
409 views

Copy of ID card: blacken / hide fields that are not relevant (Switzerland)

In recent c't there is an article about GDPR (Sorry for the German). In Switzerland there is so far no GDPR, but we have a similar mechanism called Auskunftsrecht. In article there is written that ...
Sybil's user avatar
  • 115

1
8 9
10
11 12
19