Questions tagged [data-protection-act]
The data-protection-act tag has no usage guidance.
12
questions
1
vote
1
answer
56
views
Are data controllers required to acquire the means to appropriately redact data for disclosure to subjects?
Bob appears in CCTV footage that is held by all of ACME, BCME & CCME, but also features Alice and Charles. He requests access to the footage from all of the companies and receives three different ...
1
vote
0
answers
94
views
Does the GDPR/data protection act contain any anti-reprisal provisions?
The Information Commissioner's Office ICO advisers state that one “shouldn't” be treated any directly or less favourably as a result of exercising one’s rights under the legislation. What legal ...
1
vote
1
answer
67
views
Does 2 party consent apply if the data is anonymized?
If I have a text conversation between myself and another party, both of whom reside in 2 party consent states in the US, if I remove all reasonably identifying information, do I still need consent ...
8
votes
1
answer
3k
views
Does GDPR apply when PII is already publicly available?
Pretend there is a website, it might be free to access, or be a paid per search service, where the users get access to summarised information on the people that they search for.
All of the information ...
4
votes
1
answer
220
views
Does the Colorado Privacy Act apply to churches with memberships (ex: Jehovah’s Witnesses)?
Suppose a person living in Colorado is a registered member of a church. In this church, certain “blessings” are considered contingent on your membership. Membership is recorded on a digital system.
...
0
votes
1
answer
314
views
Is OpenAI/ChatGPT compliant with GDPR, if they don't allow changing or removing the Phone Number and Email Address?
Italy has recently banned ChatGPT, and is now allowing it again in the country, after they implemented a few privacy controls.
The fact that it's now allowed again makes me wonder if Italy (and the ...
3
votes
2
answers
143
views
Access rights to professional photographs
An independent professional photographer uses a sales tactic of candidly taking photos of others in public and then approaching them and offering them copies for a price. Suppose one of these ...
0
votes
1
answer
234
views
Is it legal to store Singapore user data outside Singapore?
I am based out of india and has intent to launch the website in Singapore for singapore usesr where datastores and webservers will be hosted on data center in india. Is there any data protect act in ...
3
votes
2
answers
1k
views
What is the U.K. GDPR?
I understand that the DPA implemented the GDPR in British law as an act of Parliament. Then there was Brexit, and the U.K. GDPR was introduced to stand in for the no longer binding EU GDPR, with only ...
4
votes
1
answer
1k
views
Is it a breach of GDPR and DPA to say a colleague is sick and off work?
This is a hypothetical question. Suppose a customer calls asking for a colleague, call her Alice, and Bob answers the phone and tells the customer that Alice is off sick with the flu. The customer ...
-1
votes
1
answer
37
views
Restricting processing of data provided to police
Suppose that a person A would like to report a crime of which they’ve become a victim, to the police. For this purpose the police typically require the victim’s date of birth in order to create a ...
1
vote
2
answers
100
views
Is the local presence of a foreign non-GDPR state a data controller subject to the provisions of the Data Protection Act 2018?
Consider that state X is not subject to the gdpr, however, it has a diplomatic presence in the UK.
If the state were a tech company that operated in or even simply offered services to people in, the ...