Questions tagged [privacy]

For questions about freedom from unsolicited observation, or the collection, use and distribution of private information.

Filter by
Sorted by
Tagged with
1
vote
1answer
47 views

What prosecution can one expect for violation of information privacy principles in New Zealand?

I recently received a marketing letter in my mailbox from a building supplies company that I had never dealt with. Upon contacting them I found out that they had bought a database of people who had ...
1
vote
1answer
128 views

Facebook blocked my account until I consent to their new privacy policy under GDPR. If I consent now, will I be able to withdraw my consent later?

I am going to delete my Facebook account in a month, I can't do it now because I still use it for work. I live in the EU and Facebook has blocked access to my account unless I accept their privacy ...
4
votes
1answer
67 views

Can online business in one country deny access via terms of service to entities in another country?

Can an American company state in their terms of service that if an entity is from a designated country they are not allowed to use the service? In other words would that be a legal and enforceable ...
1
vote
2answers
63 views

Description of 3rd party cookies in the privacy policy for GDPR compliance?

In order to comply with GDPR's right to be informed section, some sites try to describe what specific cookies that 3rd parties supply do. Is it OK to just list what cookies these parties set, and ...
3
votes
2answers
147 views

Can the terms of service contain a clause that instructs a user to forfeit their rights under the GDPR?

Suppose an American company wishes to do business with European parties. Could their terms of service say that as a user of their services the user forfeits any rights afforded to them by the GDPR ...
1
vote
2answers
179 views

Handling a GDPR subject access request when using google analytics?

When using Google Analytics and receiving a GDPR subject access request does the party receiving the request also have to send all data collected by Google Analytics?
1
vote
1answer
361 views

What's the difference between “GDPR” “Privacy Shield” and “Safe Harbor”?

I'm getting confused on the differences between "GDPR", "Privacy Shield", and "Safe Harbor". Can someone please elaborate? I think Privacy Shield replaces "Safe Harbor" but I still don't understand ...
3
votes
1answer
91 views

Strata corporation installing keyless entry system and logging entrance times/dates

My concern is the strata is forcing people to sign for specified id numbers this information is then stored so they know who enters the building when and how often. I am an owner and I believe I ...
1
vote
1answer
119 views

In GDPR, who exactly are the processors and what do they have to do?

I thought the processor was just someone who processes all personal data on behalf of the controller, basically a simple substitute for some matters. But from what I read online it seems that a ...
1
vote
0answers
58 views

Legal Status of Selective Service Records Regarding Conscientious Objection

What is the legal status of conscientious objector forms in the US draft? Specifically, are records regarding specific individuals' conscientious objector applications subject to FOIA, and are they ...
0
votes
2answers
107 views

GDPR vs. Copyright for a recommendation letter

Spurred by a discussion on academia.se: suppose prof. X writes a letter of recommendation for her student mr. Y, and sends it to university Z through an on-line system. Then, the student mr. Y writes ...
7
votes
1answer
132 views

Can I request companies to give me all the data they have on me when I'm visiting a country in the EU?

I'm not a citizen of the EU, nor do I reside in the EU. But as a consumer, I welcome GDPR. It gives me some limited rights even though I'm not in the direct interests of the regulation. Anyway, if I ...
46
votes
2answers
6k views

Is requesting waiving the right to deletion of contributions against GDPR?

I just got one of those GDPR mails from gitlab.com, which pointed me to a Web page where I had to accept some terms and conditions. The same as everywhere, except this passage: (For GitLab ...
1
vote
1answer
116 views

Does GDPR apply to announcement/technical emails?

I work on a SaaS website offering both free, and paid subscriptions to B2C customers. On it, I collect statistics, and emails(subscribed and double-opt-in users only) As far as newsletters and ...
0
votes
1answer
31 views

Right to get a copy of information held on one by private company in Australia

Does anyone know what the law in Australia is with respect of getting copies of information held by Australian companies about oneself - particularly notes made by phone operators and recorded phone ...
1
vote
2answers
120 views

Can anonymized data be collected under GDPR without consent?

I am having an Android App in which I want to track the usage of the app. But the usage will not have anyone identity for eg. I would collect one user used my app for around 10 minutes but who is that ...
12
votes
4answers
648 views

What is the legal mechanism by which the GDPR might apply to a business with no presence in the EU?

My family has a small side business selling some things through the internet. As far as I know, we aren't likely to have any customers who are EU citizens, but it's certainly not outside the realm of ...
0
votes
1answer
194 views

Opt Out Consent under GDPR

I am having an Android App which uses certain service such as Analytics, Ad Networks. I am taking the consent from the user at when the app starts, i.e. before collecting any info. But there are ...
0
votes
1answer
67 views

Data Subject Rights under GDPR

I am having an Android App which uses Advertising networks and other Analytics services. Now under the GDPR the data controller which is me in my case is required to provide some rights to the user ...
0
votes
1answer
91 views

GDPR: Detecting duplicate accounts in online services with customer data

If I have a game or some other online service I host in which: It is forbidden for a subscriber to hold more than one account, OR Even if it is not forbidden, to detect one person on multiple ...
3
votes
1answer
182 views

Should email addresses be anonymized/pseudonymized under GDPR?

GDPR states recommendation to pseudonymise or even anonymise Personal Data. A lot — most of — web sites and services require email address on signup. Should, from the Data Controller's point of view, ...
2
votes
1answer
76 views

Using Personal data before consent

I am having an Android App which is going to use some services such as Google Analytics, Firebase etc. I have a thought of having two different consent screens for different region user such as EU ...
0
votes
1answer
81 views

Website Privacy Policy: Include link to internet host's policy?

Why don't most privacy policies include links to the privacy policy of the company that is hosting the website?? One would think that that given all the data that the host collects, that would be ...
6
votes
3answers
176 views

Is it illegal to intentionally design a social network that can't comply with right-to-be-forgotten (and possibly other laws)?

If I intentionally design (and program) a social network that uses a technology (blockchain,...) which does not allow for alteration / erasing of user data, what happens in case of a right-to-be-...
7
votes
4answers
2k views

GDPR: are faces always considered identifiable information?

Machine learning research into facial recognition and processing (e.g. emotion detection) often makes use of datasets containing large numbers of facial images. These are usually anonymised, so that ...
3
votes
1answer
58 views

GDPR - Is having a PDF with fields to fill out classed as data?

I have a website which has a link to a PDF form which users can print out and fill in. I'm wondering if somewhere I need to a statement in my privacy policy which justifies this?
1
vote
1answer
405 views

GDPR - What's classed as an opt in for Google Analytics cookie and do I need to do it?

I'm wondering if anyone can shed any light on this for me please. I've been doing alot of research about GDPR lately and how it is going to effect my websites using Google Analytics. From what I can ...
11
votes
6answers
4k views

Legality of online publishing of public records containing home addresses of large #'s of people?

Suppose that: (1) a person living in Washington state receives a large number of documents from a public records request, each containing names and mailing addresses (for hundreds of thousands of ...
0
votes
1answer
44 views

Force third party to delete ssn from database

I erroneously gave my ssn to a recruiter working for a tech recruitment company. They asked for it because they needed it to post me for a bank job. At least that's what they claimed. Long story ...
9
votes
3answers
665 views

GDPR - Withdrawn user consent

I have been reading alot about user consent management according to the GDPR and one problem I can't see solved anywhere is managing withdrawn consent. The user gives his consent to use his data and ...
3
votes
1answer
539 views

User consent required under GDPR

I am having an Android app which uses certain Analytics services such as Google Analytics, Firebase etc. These services collect certain information from the user. For this reason I have drafted a ...
2
votes
0answers
114 views

Is recording of other people in a work context without permission legal in Romania?

I am shortly going to Romania to perform an IT Audit. As an auditor, we often have to deal with people who become hostile towards us. For my own protection, in the United Kingdom I always video ...
-1
votes
1answer
190 views

How should I notify Human Resources of revocation of consent to a background check?

I submitted consent for the purpose of background check to a very established organization, which outsourced the process of background checking to another organization. Let's call them HireWrong. ...
4
votes
1answer
984 views

Germany: Does a github.io hosted site require imprint / data privacy statement according to the GDPR?

github offers free publicly accessible data storage. Many people use that to present their personal profile where they e.g. advertise for freelancing services. An example url could be http://username....
0
votes
3answers
66 views

What information about a person are private and what are public?

What information of a person I may write on my web site without special permission from that person? Lets take 'Steve Jobs', you can find a lot of websites where you can find date of birth, name, ...
0
votes
1answer
62 views

Is it legal to publish information about companies on my website?

I want to publish info about companies, for example: Official title Address Founder, CEO, CFO, ... Number of employees Products of company Description of what company does Personaly I feel like it ...
3
votes
1answer
160 views

What is the punishment for misusing Aadhar card details in India.?

Some unknown person created an online account with my Aadhar card details and booked a room with that account. I guess the person is the PG owner to whom I gave my Aadhar card to photocopy as proof ...
1
vote
2answers
80 views

Can my user agreement require end users to indemnify me for misuse of their data by third-party services embedded in my app?

I have an Android App which is already in the Play Store. Now due to GDPR I am planning to improve my Privacy Policy and a Terms of service. I am planning to add certain terms in my Terms of service ...
2
votes
1answer
149 views

Is a security guard at an IRS office legally allowed to demand to see my cell phone?

This is sort of related to this other question but in this case it is about a cell phone and about entering a government (IRS) office. I visited an IRS field office in Worcester (Massachusetts, USA) ...
4
votes
1answer
686 views

How does the CLOUD Act apply for non-US persons' data stored on US-owned servers outside the USA?

The Clarifying Lawful Overseas Use of Data Act or CLOUD Act (H.R. 4943) was signed into law on March 23, 2018. The law became necessary because the previous legislation in the Stored Communications ...
3
votes
2answers
157 views

GDPR liability for Web Designer

I am a web designer that works with a range of clients on a project basis. I complete a project and then offer my services at any hourly rate for any other work required in the future. Do I have a ...
0
votes
1answer
192 views

Is it illegal to use a proxy chain in the UK?

As you are all aware about the whole Facebook fiasco.... I am now wanting to be as anonymous as I can online, one method I found was to use a proxy chain. I am just wondering if it is legal in the UK ...
1
vote
0answers
187 views

Is it legal to track a scammer's IP address?

One of my contacts has messaged me asking for help about a scam. He was saying that one same person keeps harassing him with scam messages threatening to put some videos of him online if he doesn't ...
3
votes
2answers
143 views

Would public chat servers be considered public spaces or communications, for recording purposes?

By this definition, a public place is generally an area, whether privately or publicly owned, to which the public have access by right or by invitation... but not a place when used exclusively by ...
1
vote
1answer
385 views

Is there a UK equivalent to the USA's FERPA?

The Family Education Rights and Privacy Act (FERPA) describes rights students have to their private records in the United States. Is there an equivalent for students in the United Kingdom?
0
votes
1answer
119 views

How does one exercise their GDPR related rights?

In May, GDPR will become effective and have a global impact on how personal data is handled. Article 20 of the GDPR requires complying systems provide Data Portability. If a European citizen was to ...
5
votes
2answers
226 views

What legal reason is there to publicize Michael Cohen's client list?

As a lay person I'm a little shocked at the proceedings with the Michael Cohen raid, as it clearly has some issues with attorney client privilege. While it may have bearing on the court case, and I'...
3
votes
1answer
93 views

Does the FTC Act of 2006 require utility companies to verify an account holder's identity?

The gas company wanted me to give them my SSN to start service. Naturally, I refused. I was told that they were required by law to verify my identity, and offered me the alternative of submitting a ...
1
vote
2answers
107 views

Is it legal to ask someone their birthday in an interview?

I'm applying for a job where they want a lot of personal details from me. The HR rep specifically asked me for my birth date. I heard this is illegal, is it true? If relevant, the question was asked ...
1
vote
1answer
71 views

Can a student send a personal email on school campus without scrutiny by administration?

Is the following scenario legal Let's say that there is a student A, who sends student B in a personal email but on school campus and on school wifi. Student A's email includes derogatory description ...