Hot answers tagged

7

How can I truly say that I 'consent' to data collection and processing when I am coerced, so to speak, by the threat of failing my courses if I do not use this novel software? There is no need for you to "consent". Consent is just one of the reasons that allows a data processor to collect your data. There are other reasons that allows the data processor to ...


2

It is illegal to advertise yourself as a "Private Investigator." However, businesses under the name of "흥신소(background checkers)" is legal and their scope of operation is hard to distinguish from that of Private Investigators. Therefore, it is not illegal to hire someone to collect evidence, interview witnesses as long as those actives are within the bounds ...


2

In Germany, there is no statutory offense of “breaking in”. Instead, break-ins are (depending on the nature of the crime) prosecuted as trespassing (Hausfriedensbruch, § 123 StGB), criminal damage (Sachbeschädigung, § 303 StGB) and/or theft (Diebstahl, § 242 StGB). (Some cases may fit additonal statutory offenses, e. g. tampering with an electronic lock can ...


2

I am hoping you found an answer elsewhere, since this post is old. The short of your question is, it depends on the type of issue the medical records address (such as medical condition, behavioral health, or drug/alcohol treatment), what state you are in, what state the records are from, and how a Prohibition on Redisclosure may be understood. My ...


1

Yes They only guarantee to not sell “personal data” which is data that can be traced back to a specific individual. Aggregated data is not personal data unless the data set is so small that it can identify an individual.


1

As the company implemented it that way, it is a bad idea to notify them. First and foremost, you notify the company of a security issue - you give them a reasonable amount of time to resolve it, and then you publish it. The management may know nothing about how the data is handled, and may rush to fix it when notified - you cannot make an assumption that ...


1

I fear that you have 'jumped the gun' - I think you and your colleagues in the legal/compliance department should first meet to discuss your project. You must facilitate their understanding of the project so that you and they can discuss your options and obligations under GDPR and other such rules in your jurisdiction. It may be the case that this project ...


1

This isn’t anonomization under the GDPR The reason IP addresses are personal data is because they are unique to an individual. So are your hashes.


1

Automattic (who run wordpress.com) aren't responsible for the content others post on to their platform. From their Terms: We have not reviewed, and cannot review, all of the content (such as, but not limited to, text, photo, video, audio, code, computer software, items for sale, or other materials) posted to our Services by users or anyone else (“Content”)...


Only top voted, non community-wiki answers of a minimum length are eligible