New answers tagged

0

The "Global Mobility Specialist" of my company has confirmed in a Slack channel for immigration information that it's fine to post this inside your own apartment, e.g. living room and kitchen. He said some folks even post it in their bedroom.


1

You can offer such services as a private person, but you will have to disclose your address. First, let's discuss whether this is business activity that needs to be registered. A business activity (gewerbliche Tätigkeit) is any permanent/repeated activity that is intended to make a profit. Any repeated income can be evidence of business activity, unless it ...


2

Communicate how you like You are under no obligation to use any particular method of communication. If you don’t want to use email use the post. Or hand-deliver your messages (probably better to use a courier so it doesn’t look like stalking). Of course, she is free to share anything and everything you send her with anyone she likes. Unlike the lawyer, she ...


1

I'm writing some software for use in a school. ... full student records in other computer systems. does GDPR apply to the storage and processing of solely student email addresses? The school has a range of computer systems, now including yours that processes email addresses only. Even though your system does not by itself allow to identify ...


2

The email address is PII 1 student, 1 email address. The email address itself uniquely identifies someone so it's PII.


1

Yes They only guarantee to not sell “personal data” which is data that can be traced back to a specific individual. Aggregated data is not personal data unless the data set is so small that it can identify an individual.


-1

You should notify it to Google or Apple. The application is clearly spying on customers. The owner of the application said "we only collect X information" but instead, the application is collecting X + Y. then it breaches the contract.


1

As the company implemented it that way, it is a bad idea to notify them. First and foremost, you notify the company of a security issue - you give them a reasonable amount of time to resolve it, and then you publish it. The management may know nothing about how the data is handled, and may rush to fix it when notified - you cannot make an assumption that ...


1

I fear that you have 'jumped the gun' - I think you and your colleagues in the legal/compliance department should first meet to discuss your project. You must facilitate their understanding of the project so that you and they can discuss your options and obligations under GDPR and other such rules in your jurisdiction. It may be the case that this project ...


1

This isn’t anonomization under the GDPR The reason IP addresses are personal data is because they are unique to an individual. So are your hashes.


7

How can I truly say that I 'consent' to data collection and processing when I am coerced, so to speak, by the threat of failing my courses if I do not use this novel software? There is no need for you to "consent". Consent is just one of the reasons that allows a data processor to collect your data. There are other reasons that allows the data processor to ...


2

I am hoping you found an answer elsewhere, since this post is old. The short of your question is, it depends on the type of issue the medical records address (such as medical condition, behavioral health, or drug/alcohol treatment), what state you are in, what state the records are from, and how a Prohibition on Redisclosure may be understood. My ...


2

It is illegal to advertise yourself as a "Private Investigator." However, businesses under the name of "흥신소(background checkers)" is legal and their scope of operation is hard to distinguish from that of Private Investigators. Therefore, it is not illegal to hire someone to collect evidence, interview witnesses as long as those actives are within the bounds ...


Top 50 recent answers are included