Questions tagged [privacy]

For questions about freedom from unsolicited observation, or the collection, use and distribution of private information.

Filter by
Sorted by
Tagged with
1
vote
1answer
77 views

Is it illegal to state in your website that an employee of a company emailed you?

I have an open source project regarding software used in banking and I have received emails about it from employees working in top banks/consultancies. I am considering to mention this in the website,...
1
vote
1answer
63 views

Private company making it hard to delete customer's personal data

Storyline A friend of mine opened an account with an online company that sells picture prints. Without her knowing, just after signing in, somehow (she did not understand how; probably through the ...
0
votes
2answers
128 views

Is it legal for a private business to require contact information to complete a checkout?

We were in a counter-service restaurant today. When we went to pay, their checkout system required a telephone number and email address. We asked if we could opt-out and just pay, and were told that ...
-1
votes
1answer
71 views

How much can privacy concerns ignore danger?

Cell phone companies generally help police get the location of a missing person if there is some reasonable suspicion of danger. Is there any cell phone company (in any country) which values privacy ...
-2
votes
2answers
106 views

GDPR no opt out option [closed]

Is it legal if we do not offer an explicit opt-out option in our app for non-persnonal data collection? We planned to explain to the user what data we collect and at the bottom of the screen there ...
3
votes
2answers
154 views

Do default Apache logs violate the GDPR?

Joe is a completely novice Web developer who sets up an Apache server on its defaults, which include collection of log files which basically say "this specific file was requested by this specific IP ...
2
votes
1answer
55 views

Legal sending personal information to a third party if the user supplied incorrect contact information?

To clarify the title, here is an example: Alice wants to sign up to online store Nile.com Alice enters the email bob@mailprovider.com by accident Nile.com does not send a verification that Alice has ...
4
votes
1answer
86 views

Is it legal to compel users to share data in order to access more features, when the features being accessed do not require the data being requested?

Apologies in advance if this is not the correct exchange for this question. I am a developer working for a company that owns a healthcare application. They operate exclusively in the EU. As part of ...
1
vote
1answer
53 views

What information will be made public by CRT and for how long?

I would like to bring a case to the Civil Resolution Tribunal. I would like to know more about it's privacy. From there Information Access & Privacy Policy it appears the public can access just ...
1
vote
4answers
68 views

Which countries' law should be considered for Privacy Policy and Terms of Use in a localized website

Should a multi-language website have different privacy policy and terms of use content for the languages it implements? Or is it just perfectly legal to have a mot-a-mot translation of the base ...
2
votes
2answers
118 views

Proof of Consent under GDPR, HOW TO?

One of GDPR Lawful Bases for Processing Personal Data (and that means Collect; Access; Store; Process and Share) is Consent. Companies must have documented proof of Consent as per defined under GDPR ...
1
vote
1answer
37 views

Copy of ID card: blacken / hide fields that are not relevant (Switzerland)

In recent c't there is an article about GDPR (Sorry for the German). In Switzerland there is so far no GDPR, but we have a similar mechanism called Auskunftsrecht. In article there is written that ...
0
votes
2answers
151 views

Are Steam account IDs (and telemetry data associated with Steam IDs) deemed personal data?

A few friends and were having an argument on the following situation: People can sign up for Steam accounts for free, letting them purchase games and play games over their network. Users are able to ...
1
vote
1answer
84 views

Are you allowed to put a customer's email address in an internal business email?

Today at work I put a number of our customers' email addresses in an email that only people in the business were CCed on because we were dealing with a matter relating to these customers and their ...
-1
votes
3answers
69 views

What legal proof is valid for a user to complain under an online privacy policy

Now a days most of website like Bank,Social media,Financial service apps and almost all online service) when we signup or create online a/c or use some online services we need to select privacy policy ...
4
votes
4answers
193 views

Is a Blood sample considered Personal Data under GDPR?

Just that simple question: Is a Blood sample considered Personal Data under GDPR?
3
votes
3answers
159 views

Is a public IP address classified as “personal data” for a third party under EU law?

Situation: an individual in the EU has a web site available on Internet (= if you are on Internet, you can connect to that web site). The IP addresses of the connections to this web site are stored in ...
0
votes
0answers
26 views

Is it required for web store to have database server located in Australia?

I have an online store. I have been told that Certain privacy laws require documents to be stored on Australian shores. What is exactly required and in what documents is it stated.
-3
votes
2answers
111 views

What legal charges could I face after this action?

So it seems I might have made a mistake. It was sunday evening and I was hanging out with around 10 people aged between 16 and 26 (rough estimate). At one point I grabbed the phone of one of the ...
0
votes
2answers
124 views

Mass, commercial identification of people appearing in porn

Someone on the Internet claims (I'll call this person "the operator" below): They have crawled around 100TB of data from both mainstream social networking sites, and porn sites with user-generated ...
2
votes
2answers
89 views

Do user-generated content and votes count as personal data under the General Data Protection Regulation (GDPR)?

Do user-generated content and votes count as personal data under the General Data Protection Regulation (GDPR)? For example, on Stack Exchange, do the questions, answers, comments, messages and ...
3
votes
3answers
91 views

GDPR: Is giving out customer name and implied existence of customership legal?

I'm an employee (software developer) for a company that acts a data processor, and the company that is a client and data controller has requested a feature that I find questionable. The purpose is to ...
1
vote
1answer
96 views

Divulging students' grades to third parties

In the U.S., I understand that it is illegal for teachers to divulge a student's grades to anyone with no legitimate claim to the information. Is it similarly illegal for parents to do that? In some ...
-4
votes
3answers
87 views

Are the irritating web site warnings about cookies an intentional consequence of European legislation?

It seems that in the last couple of years, it has become standard for web sites to have irritating pop-over notifications that their web site uses cookies “to enhance your user experience” or ...
1
vote
2answers
129 views

If we anonymize Google Analytics IPs do we still need to ask for Cookie consent? [duplicate]

Trying to figure out the most light weight way to have Google Analytics on a site without having to ask for cookie consent. If we turn on IP Anonymization do we still need to ask for consent? If so ...
1
vote
0answers
58 views

To achieve ECTS credits at my school a student is forced to drop his/her right of privacy

Some background about the situation: I attend a vocational university (university of applied sciences) I live in the Netherlands - Europe We have a mandatory activity that provides us with ECTS ...
1
vote
1answer
44 views

Does the GDPR mandate that web sites provide access to cookie settings?

Cross referenced this question with SO just to get more technical perspective In this article it says with respect to: Google Analytics and GDPR consent to cookies and tracking: Based on a true ...
1
vote
2answers
64 views

Does CNNs cookie consent banner comply with the GDPR?

I just got done reading this cookie consent material and it says that we need to keep a record of cookie consent. It also says that the notification needs to allows users to opt in and out of ...
0
votes
2answers
54 views

How are the laws considering storing country details of visitors of my website? (calculated of their ip adresses)

I wanted to add the country of the people who left a review on a website but I was wondering how this regards towards the laws about privacy. I have been doing quite some research into this topic but ...
0
votes
2answers
96 views

Do mature minors have the right to privately consult with a medical professional?

The title should be relatively self-explanatory. Do mature minors (aged 16 or older) have a legal right to privately consult with a medical professional, free from the involvement of a parent, ...
2
votes
3answers
260 views

Landlord required to divulge tenant identity

A new law requires landlords to provide the following information about their tenants: Name Who is "head of household" Phone number Age (approximate) Then the tenant is required to go to the town ...
3
votes
3answers
129 views

Public record or PII

In the past, I had interactions via email with various boards of my town government. I recently noticed that printouts of these emails were scanned and added to the "meeting package" - a PDF document ...
1
vote
4answers
269 views

Can a one-time-pad provide legal immunity - (make data inadmissible) -?

IMPORTANT NOTE: This question is quite niche, I am not sure if this stack is the most relevant place, please inform me if there is a better place for it. To explain the question: I am asking if, a ...
0
votes
1answer
85 views

Connecting to a Network Equals Consent?

We have been presented with a proposed license agreement that claims that connecting to our organization's WiFi network constitutes consent for them to perform surveillance and install spyware on our ...
2
votes
2answers
759 views

Can a neighbor point cameras at our backyard and the back of our house?

We live in the hills. And the way our neighborhood is designed is as you go up the hill, there will be a house below you, and a house above you (which are side by side to your property). The elevation ...
3
votes
1answer
75 views

How to make data brokers delete my information without providing more information? Can I take legal action?

I've been reading this terrifying list of data brokers after finding my information in a Google search result. I want to reach out to the "high-priority" data brokers and get them to remove me from ...
0
votes
1answer
86 views

Congress and Trump's Tax Filings [closed]

I am very interested in Congress subpoenaing the IRS for Trump's individual Tax Return for the last 6 years. I realize they have oversight. But it would look to me as an one outside of the law ...
0
votes
1answer
73 views

What should happen if I ask Proxy / VPN provider about their service illegal use against me? [closed]

Let's say I am running a website that somebody is trying to hack, from the logs I got that he is using mostly VPN servers of X company. So, even if the VPN company adverts themselves for being 100% ...
-2
votes
1answer
106 views

Is it legal for tax company to fail to protect my tax info from former spouse?

I file taxes with H&R Block. I divorced in 2016. My ex-spouse logged into H&R Block 4/13/19 and was able to view my 2016 and 2017 taxes. An H&R Block associate instructed me to contact ...
4
votes
1answer
134 views

'Right to be forgotten' denied due to insufficient identification

I registered for a free online service with fake data while being underage. Years later I request to have the account deleted, using the e-mail address I registered with. However, to identify me as ...
1
vote
1answer
56 views

Is there a general business equivalent of “stage names” or “pen names”

And by that I mean: a situation where an individual can conduct their general business activities privately within a proprietorship under a fictitious "pseudonym" or via proxy? Though I'd imagine if ...
0
votes
2answers
43 views

Access to sensitive information of employees as a fellow employee

I'm a programmer who works closely with an engineering firm to create tools for the automation of business processes. One of which I'm working on currently requires that have the access (although I ...
2
votes
1answer
64 views

Concealing Medical Conditions from Employer

If an employer asks an employee or prospective employee to fill out and sign a health declaration form (very common in the medical field) like this. If the employee is afraid that revealing their ...
6
votes
1answer
935 views

Is it okay to store user locations?

I know it might sound quite bad. But here I explain the whole situation. I'm developing a mobile application based on visiting different places. And I would store in some database (surely AWS) all ...
1
vote
0answers
35 views

EU Cookie Law: Consent required in addition to accepted privacy policy

According to iubenda [1], a cookie consent is required in mobile apps too, though I did not see many apps following this advice yet. The realization of such a cookie consent on web sites is typically ...
2
votes
1answer
80 views

Is it a violation of GDPR law to email personnel gathered from hunter.io?

I'm a web developer working on a project for a client. The project is a directory of sustainable companies (enviromental-friendly companies). The project is only launching now. The companies listed ...
0
votes
0answers
35 views

Is it a breach of UK law to film without permission in a swimming pool? [duplicate]

At the leisure centre I work at I caught someone filming in a busy pool with a goPro. I have been wondering whether this was merely a despicable and insensitive act on their part, or a straight up ...
1
vote
1answer
91 views

Is name and shame legal on Facebook?

On Facebook, there are various landlords communities. I have seen landlords post messages such as: Do not rent your property to this person, first name, last name, how this person looks like and etc. ...
1
vote
1answer
101 views

Gawker vs. Hulk Hogan sex tape case and the 1st amendment

I'm a little confused about this case. Doesn't being recorded in your own home, or someone elses for that matter, require consent? Isn't there a reasonable expectation of privacy when you're not in ...
0
votes
1answer
63 views

Can a sysadmin ever read emails or PMs on his server, when secrecy of correspondence is in the constitution?

There is another question here that asks something similar, but apparently it refers to the US, where secrecy of correspondence doesn't seem to exist, at least according to this article on Wikipedia: ...