25

The goal of the GDPR is to ensure a single market for personal data processing throughout the EU. Since all EU/EEA member states now have equivalent levels of data protection, it doesn't matter in which member state data is stored or processed. Member states cannot generally limit this single market via national laws. Furthermore, secure processing may be ...


3

An employer owns the data on a cell phone provided to its employee if the employer has made that a condition of employment. The employer might own the data independently (e.g. the employer created it). Or, the employer might own it if the employee created it in the course of their employment. It's not where the data is that determines ownership, it's who ...


3

We cannot dispense personalized legal advice: that is what your attorney is for. However, I agree with your analysis that this is most likely covered by fair use, and indeed it is not obvious that you have taken anything that is protected. There is no creativity behind a number such as entries in the "I did N pushups" column. The arrangement of ...


2

These are just facts, reported by the program, and not someone's creative product, so it is not protected by copyright. The data might contain a word that coincides with a trademark, but that probably doesn't matter. Registering a name as a trademark doesn't mean that you have absolute ownership of that word, it means you have control over its use in the ...


2

...do I own the data on a website that I created an account? Maybe not. Read the Terms of Service for the site; it is a legally binding contract. The TOS will outline what you agree to when opening an account and using the site. When signing up for the free plan, you agreed to the TOS, and you probably agreed to a stipulation that the site owners are only ...


1

Is it legal to sell cracked gaming accounts? Usually not. Your mention that "[i]t clearly goes against the terms of service" purportedly refers to a prohibition to deliver credentials to access the game. It is otherwise impossible to address specific ramifications without a detailed knowledge of the terms of service. As for your follow up comment, the ...


1

One source of such a requirement would be contractual: A provides access to B pursuant to a contract, and the contract requires A to observe certain standards. A second source would be direct regulation, following certain statutes. HIPAA (in particular the Privacy Rule) applies to healthcare providers, but also "Where provided, the standards, requirements, ...


1

I know this is a old question but I saw it and thought to just answer it. Facebook says that the message is deleted from the servers (only if both parties remove a message). And then I was thinking, why? As part of GDPR the part where it states: (a) the personal data are no longer necessary in relation to the purposes for which they were collected or ...


Only top voted, non community-wiki answers of a minimum length are eligible