Hot answers tagged

3

The material scope of the GDPR (Article 2) is limited to the processing of personal data (including mere storage) by automated means or as part of a filing system. The question of whether your activity falls within this scope hinges on what you actually do with the data once you take possession of it. You have mentioned saving the contact information of ...


2

I would ask the manager to "see the tape" (recording). If there is indication that a device was used to observe you in the fitting room and come to the conclusion that you were engaged in theft, then there may be a case of invasion of privacy: 1.1. Penal Code 647(j)(1) – using a device to look through a hole or opening It is an invasion of privacy ...


2

Fingerprints are required in a number of states to get a CPA license. Under California Board of Accountancy Regulation 37.5 A licensee applying for renewal as a certified public accountant or public accountant who has not previously submitted fingerprints as a condition of licensure or for whom an electronic record of the licensee's fingerprints ...


1

There is a lot of confusion around the UK and its laws which supposedly require full log retention - the only law which addresses this is the 2016 Investigatory Powers Act (amended by the 2018 Data Retention and Acquisition Regulations Act) and this act requires you to retain full logs only on receipt of a valid "retention notice" from the Secretary of State....


1

Exposure If I discover that Bruce Wayne is Batman, I am free to disclose this information to whoever I like with no legal ramifications. Secret identities are only secret while you keep them secret. There are specific exemptions to this general rule regarding undercover police or official spies - doing that is illegal. In addition, if I learn Batman’s ...


1

The app is likely GDPR compliant. However the organization has a remaining obligation, namely that of Art 11.2 GDPR. A user who can show exclusive control of that IP address (i.e. that the IP address uniquely identifies him or her) still has the usual GDPR rights. It is not necessary to offer these rights via the app itself. Another reasonable mechanism ...


1

I know this is a old question but I saw it and thought to just answer it. Facebook says that the message is deleted from the servers (only if both parties remove a message). And then I was thinking, why? As part of GDPR the part where it states: (a) the personal data are no longer necessary in relation to the purposes for which they were collected or ...


Only top voted, non community-wiki answers of a minimum length are eligible