Skip to main content

Questions tagged [data-protection-act]

The tag has no usage guidance.

1 vote
1 answer
56 views

Are data controllers required to acquire the means to appropriately redact data for disclosure to subjects?

Bob appears in CCTV footage that is held by all of ACME, BCME & CCME, but also features Alice and Charles. He requests access to the footage from all of the companies and receives three different ...
TylerDurden's user avatar
1 vote
0 answers
94 views

Does the GDPR/data protection act contain any anti-reprisal provisions?

The Information Commissioner's Office ICO advisers state that one “shouldn't” be treated any directly or less favourably as a result of exercising one’s rights under the legislation. What legal ...
TylerDurden's user avatar
1 vote
1 answer
67 views

Does 2 party consent apply if the data is anonymized?

If I have a text conversation between myself and another party, both of whom reside in 2 party consent states in the US, if I remove all reasonably identifying information, do I still need consent ...
belkarx's user avatar
  • 244
8 votes
1 answer
3k views

Does GDPR apply when PII is already publicly available?

Pretend there is a website, it might be free to access, or be a paid per search service, where the users get access to summarised information on the people that they search for. All of the information ...
user5623335's user avatar
  • 1,202
4 votes
1 answer
220 views

Does the Colorado Privacy Act apply to churches with memberships (ex: Jehovah’s Witnesses)?

Suppose a person living in Colorado is a registered member of a church. In this church, certain “blessings” are considered contingent on your membership. Membership is recorded on a digital system. ...
moonman239's user avatar
  • 3,068
0 votes
1 answer
314 views

Is OpenAI/ChatGPT compliant with GDPR, if they don't allow changing or removing the Phone Number and Email Address?

Italy has recently banned ChatGPT, and is now allowing it again in the country, after they implemented a few privacy controls. The fact that it's now allowed again makes me wonder if Italy (and the ...
GDPR's user avatar
  • 47
3 votes
2 answers
143 views

Access rights to professional photographs

An independent professional photographer uses a sales tactic of candidly taking photos of others in public and then approaching them and offering them copies for a price. Suppose one of these ...
TylerDurden's user avatar
0 votes
1 answer
234 views

Is it legal to store Singapore user data outside Singapore?

I am based out of india and has intent to launch the website in Singapore for singapore usesr where datastores and webservers will be hosted on data center in india. Is there any data protect act in ...
M Sach's user avatar
  • 109
3 votes
2 answers
1k views

What is the U.K. GDPR?

I understand that the DPA implemented the GDPR in British law as an act of Parliament. Then there was Brexit, and the U.K. GDPR was introduced to stand in for the no longer binding EU GDPR, with only ...
TylerDurden's user avatar
4 votes
1 answer
1k views

Is it a breach of GDPR and DPA to say a colleague is sick and off work?

This is a hypothetical question. Suppose a customer calls asking for a colleague, call her Alice, and Bob answers the phone and tells the customer that Alice is off sick with the flu. The customer ...
Heddy's user avatar
  • 641
-1 votes
1 answer
37 views

Restricting processing of data provided to police

Suppose that a person A would like to report a crime of which they’ve become a victim, to the police. For this purpose the police typically require the victim’s date of birth in order to create a ...
TylerDurden's user avatar
1 vote
2 answers
100 views

Is the local presence of a foreign non-GDPR state a data controller subject to the provisions of the Data Protection Act 2018?

Consider that state X is not subject to the gdpr, however, it has a diplomatic presence in the UK. If the state were a tech company that operated in or even simply offered services to people in, the ...
JosephCorrectEnglishPronouns's user avatar