Questions tagged [privacy]
For questions about freedom from unsolicited observation, or the collection, use and distribution of private information.
916
questions
1
vote
2
answers
335
views
Is anonymous analytics data subject to GDPR?
I am reading the definition of "personal data" here https://gdpr-info.eu/issues/personal-data/. My understanding is that GDPR comes into play when information is about personal data.
Let's say there ...
1
vote
0
answers
219
views
Deletion of Facebook messages
This question has been asked before, but it doesn't bring up several important points. As things currently stand, deleting a Facebook message only removes it from your inbox but the recipient still ...
5
votes
2
answers
362
views
Why do so many YouTube channels ask people if it's OK to show them in their videos?
My understanding is that it's not illegal to film people in public where there can be no reasonable expectation for privacy. However, if that's the case, why do so many channels on YouTube ask people ...
2
votes
0
answers
479
views
Can plastic surgery office deny removing your before pictures from your file?
I was a patient @ Evolution MD. It is a plastic surgery / med spa that offers various treatments. I had a genital bleaching done a month ago, some pictures where taken and I was informed it was for my ...
1
vote
1
answer
195
views
Bill of Rights protection against mandatory vaccination?
Does the the "privacy" protection afforded by the Bill of Rights covers unwanted medical treatments, including unwanted drug taking, notably mandatory vaccines?
0
votes
2
answers
167
views
privacy and (proxy) voting
X and Y are entitled to vote at a UK company's general meeting. Proxies are allowed and instructions are to be notified to the company office in advance of the meeting. Votes at the meeting are to be ...
2
votes
1
answer
112
views
Is it a HIPAA violation for a dentist office to print a patient's password on paperwork?
Dentist office just printed my password (to their portal) on their paperwork.
Surely this is a HIPAA violation (or against best practices, HIPAA or otherwise).
Can anyone confirm if so and point me ...
2
votes
2
answers
132
views
Definition of a Household or Device in the context of the California Consumer Privacy Act (CCPA)
The California Consumer Privacy Act (CCPA) applies to a business if it meets one of:
Has annual gross revenues in excess of twenty-five million dollars...
Alone or in combination, annually buys, ...
4
votes
2
answers
326
views
Hypothetical question about Whistleblower Protection
Let's say a US non-government employment comes in contact with very sensitive unprotected information on the web. The information was gathered using opsint (Open Source Intelligence) there was no ...
2
votes
1
answer
81
views
Does the European Convention on Human Rights protect from infringements arising as a result of exercising rights in conjunction?
I was reading the cases of Modinos v. Cryprus and Pay v United Kingdom, and am confused regarding the interaction of Article 8 private life & Article 10 freedom of expression.
In Modinos v ...
1
vote
1
answer
348
views
GDPR on Proxy Users
I believe I have a good overall understanding about the GDPR legislation, in terms of what needs to be protected, etc...
My questions here are about the scope of GDPR.
Does GDPR apply to people who:
...
0
votes
2
answers
206
views
Is there precedent of secret subpoena that compels government access?
Under what guise of law, would state actors (UK, US, etc.) be able to issue secret (unpublished) subpoenas that require industry / utilities to provide government access to their systems? Examples of ...
0
votes
0
answers
682
views
GDPR IFrame Cookies - Opt-In necessary?
A lot of googling didn't help me with the following questions:
Given I own a website which only creates one cookie that identifies a users session - is it okay to embed said website in an iframe ...
1
vote
3
answers
580
views
Can the employer fully access employee data according to EU law?
The computers at the company I work for recently show the message below during log on.
This computer system is the property of Company. It is for authorised
use only. All activities conducted on ...
1
vote
2
answers
78
views
Can governments require administrators of groups on social media platforms to buy licenses?
The Kenyan government now wants administrators of WhatsApp groups and other social media platforms to pay for licenses. Is this possible with the GDPR, Facebook privacy policy, etc., as the proposed ...
2
votes
1
answer
168
views
Under GDPR EU law, can I sue big tech companies (Facebook, Google, Apple) for acquiring and storing my personal data without my consent?
Many of my friends have social media accounts (Instagram, Facebook, etc.) where they regularly post photos of them and where occasionally I appear in them.
Many of my friends have their personal ...
1
vote
1
answer
303
views
What can i do if my GDPR requests are being ignored?
I have requested my personal data removal from one shady company that has gotten to my email somehow.
They said they've complied, but i am still getting newsletters from them.
What can i do as a ...
1
vote
2
answers
232
views
Is it illegal to test someones abandoned DNA in the United States?
Let's say I suspect my friend (or spouse) has Huntington's disease. If I were to take their used tissue out of the garbage can and test it for Huntington's disease, would that be illegal?
1
vote
1
answer
69
views
Is sending log data + customer name + location compatible with data privacy and GDPR?
I've written an updater program. Our customer downloads it to update our software with database. It would be helpful if we would know who has already updated our software. For this purpose I've added ...
2
votes
1
answer
165
views
Public WiFi - when do you have to delete stored user data?
Note: I originally thought of this for germany, but if you have examples from other countries those are also welcome, since im interested in the topic in general.
So lets say im using a public WiFi, ...
1
vote
0
answers
72
views
Is it obligatory to store ToS and Privacy Policy consent for a web app?
I've been trying to find if it's obligatory to store in a database the consent given by an user regarding the ToS and Privacy Policy, but at best what I can find is sentences saying "should".
So my ...
3
votes
0
answers
73
views
If i run a VPN service (paid) in the UK, do i by law have to keep logs?
So i want to start my own VPN company. Already have it setup and working etc but i'm based in United Kingdom (my servers are based in US though).
Because i am based in the UK, i know that law ...
1
vote
0
answers
52
views
Does a GP sending patient info to a hospital without asking for consent violate medical ethics?
So, let’s say that you went to a General Practitioner (GP) about some pain, got some tests done, and they told you that you were fine; all the tests came back normal.
Then, some time later, they look ...
0
votes
1
answer
495
views
Is it legal to hire a Private Investigator in Korea? If not, what's the closest alternative?
I'm writing a story and I'm asking for factual accuracy in the storyline. (Not asking for suggestions in hiring an actual PI.)
I know for a fact that it's now illegal in Korea to hire a Private ...
1
vote
1
answer
438
views
If I have access to some else's Whatsapp, can I use it as evidence?
I have a client who asked me the following question.
Her husband gave her access to his Whatsapp as a trust exercise. She then used it to open Whatsapp web on her computer and follow the ...
1
vote
1
answer
184
views
Consequences of blank check on privacy policy?
Some websites intentionally hide access to privacy policies and terms & conditions they require users to agree to.
For example, consider the Hotel De Anza. If you click through the steps of the ...
0
votes
4
answers
192
views
Data Protection Laws
Some Co-workers of mine have been sending customer's personal information, that includes banking details through unsecured plaintext emails. This feels to me like it is definitely breaking laws/...
1
vote
0
answers
149
views
Replace User ID with pseudonym, still need consent?
I use a service called Matomo (as opposed to Google Analytics) so that I can own the data collected, and I thought they were better in regards of user privacy.
My goal is to avoid collecting any ...
0
votes
1
answer
167
views
United States HIPAA and New Zealand HISO from outside these countries
We are developing a software product for storing and managing health records in Australia, with the software product primarily targeted towards Australian healthcare organisations. This requires us to ...
0
votes
2
answers
681
views
Storing chat messages in a private database with user consent
The Situation
I am currently creating a Telegram bot for me and some friends that stores all chat messages we send in our group chat in a database so that we can retrieve advanced chat statistics. I ...
1
vote
1
answer
43
views
Am I responsible of the personal data of a second degree user according to GDPR
Suppose we have an flight ticket booking system. As with many of these systems the account booking the ticket doesn't have to be the one using the ticket (i.e. you can book for someone else the ticket)...
4
votes
2
answers
124
views
Opting out of cookies by emailing a company
Is it legal for a company, which serves customers in the EU as well as elsewhere, to say in its privacy policy that you can opt out of analytical and marketing cookies by emailing them? Rather than ...
3
votes
2
answers
5k
views
Can a family member break into my room and can I take legal actions against it?
Here is the situation.
I still live with my family like my brother (we are both of legal age) . We never had a good brother relationship. We always try to avoid each other as best as we can. In the ...
1
vote
1
answer
76
views
Forgery of video [closed]
I am 79 years old and a resident of a four storey building in NSW, comprising of 26 units. The multi-millionaire Chairman of our building's Strata Committee, who lives in the fourth floor’s penthouse ...
-1
votes
1
answer
378
views
Forcing a person to remove a picture of me
I was riding home on the bus from summer school. A girl and I had a debate and she ended up frustrated and moved seats. The girl then started taking pictures of me. When I told her to stop, she ...
0
votes
1
answer
107
views
When does medical privacy start?
In a conversation between, say, Alice and Bob, if Bob shares his medical history with Alice, under which conditions is this information considered private medical information?
If Alice is a ...
2
votes
2
answers
2k
views
Can text message be used against me in court
My daughter's father has petitioned the court for custody modification and is using text messages he downloaded against me. The text messages in question were not sent to him but, rather, were ...
2
votes
2
answers
152
views
Is internet tracking "public info" for insider trading purposes?
Suppose I own a search engine. I look at my server logs and see that the query "how to fix exploding engine" is very popular in the area around Tesla headquarters. Would it be legal to act on this ...
1
vote
1
answer
98
views
Is it illegal to state in your website that an employee of a company emailed you?
I have an open source project regarding software used in banking and I have received emails about it from employees working in top banks/consultancies.
I am considering to mention this in the website,...
1
vote
1
answer
107
views
Private company making it hard to delete customer's personal data
Storyline
A friend of mine opened an account with an online company that sells picture prints. Without her knowing, just after signing in, somehow (she did not understand how; probably through the ...
0
votes
2
answers
197
views
Is it legal for a private business to require contact information to complete a checkout?
We were in a counter-service restaurant today. When we went to pay, their checkout system required a telephone number and email address. We asked if we could opt-out and just pay, and were told that ...
-1
votes
1
answer
83
views
How much can privacy concerns ignore danger?
Cell phone companies generally help police get the location of a missing person if there is some reasonable suspicion of danger.
Is there any cell phone company (in any country) which values privacy ...
-2
votes
2
answers
239
views
GDPR no opt out option [closed]
Is it legal if we do not offer an explicit opt-out option in our app for non-persnonal data collection?
We planned to explain to the user what data we collect and at the bottom of the screen there ...
6
votes
3
answers
2k
views
Do default Apache logs violate the GDPR?
Joe is a completely novice Web developer who sets up an Apache server on its defaults, which include collection of log files which basically say "this specific file was requested by this specific IP ...
2
votes
1
answer
159
views
Legal sending personal information to a third party if the user supplied incorrect contact information?
To clarify the title, here is an example:
Alice wants to sign up to online store Nile.com
Alice enters the email [email protected] by accident
Nile.com does not send a verification that Alice has ...
4
votes
1
answer
156
views
Is it legal to compel users to share data in order to access more features, when the features being accessed do not require the data being requested?
Apologies in advance if this is not the correct exchange for this question.
I am a developer working for a company that owns a healthcare application. They operate exclusively in the EU.
As part of ...
1
vote
1
answer
105
views
What information will be made public by CRT and for how long?
I would like to bring a case to the Civil Resolution Tribunal. I would like to know more about it's privacy. From there Information Access & Privacy Policy it appears the public can access just ...
1
vote
4
answers
150
views
Which countries' law should be considered for Privacy Policy and Terms of Use in a localized website
Should a multi-language website have different privacy policy and terms of use content for the languages it implements?
Or is it just perfectly legal to have a mot-a-mot translation of the base ...
2
votes
2
answers
484
views
Proof of Consent under GDPR, HOW TO?
One of GDPR Lawful Bases for Processing Personal Data (and that means Collect; Access; Store; Process and Share) is Consent.
Companies must have documented proof of Consent as per defined under GDPR ...
1
vote
1
answer
409
views
Copy of ID card: blacken / hide fields that are not relevant (Switzerland)
In recent c't there is an article about GDPR (Sorry for the German). In Switzerland there is so far no GDPR, but we have a similar mechanism called Auskunftsrecht.
In article there is written that ...