Skip to main content
25 votes

I forgot to BCC people in music promotion email

Don’t do it again This is a data breach under the GDPR. So, you should implement your data breach protocol which you established when you decided to become a data controller. You did do that, right? ...
Dale M's user avatar
  • 211k
3 votes

EU Data Act - Receive access logs of managed wifi access points from service provider

Depends on many details beyond the scope of an easy Q&A. Is B the data controller or the data processor? The contract between A and B should spell this out. Is wifi access provided to employees ...
o.m.'s user avatar
  • 18k
2 votes
Accepted

Is a name of person in an blog interview personal identifiable information that requires author disclosure in privacy policy?

An interviewee's name falls under right-of-publicity If you have a right to publicity or not depends heavily on the jurisdiction. Typically, an Interview is covered by those rights, and not by gdpr. ...
Trish's user avatar
  • 39.8k
1 vote

Does anonymous tracking require user consent according to GDPR and CCPA?

You are collecting personal information, so you are a Data Controller under the GDPR You need a lawful basis for the processing. There are six available lawful bases for processing. No single basis ...
Dale M's user avatar
  • 211k
1 vote

What does it mean for a data subject to have information?

The question asks about an exception to the obligation to provide information under Article 14. Paragraphs 1 to 4 shall not apply where and insofar as: (a) the data subject already has the ...
Lag's user avatar
  • 17.2k
1 vote

What does it mean for a data subject to have information?

You misunderstand the information that needs to be provided to the data subject It isn’t the personal data the controller has on the subject, it’s the information about the controller in paragraph (1) ...
Dale M's user avatar
  • 211k

Only top scored, non community-wiki answers of a minimum length are eligible