Skip to main content

All Questions

0 votes
0 answers
36 views

Is a third party which solicits and accepts personal data from a customer on another’s behalf a processor or a controller?

Alice contracts with ACME insurance which sends her to their identity verification solution provider’s app/website (BCME KYC SOLUTIONS Inc). BCME’s portal asks Alice for photos of herself and other ...
TylerDurden's user avatar
1 vote
1 answer
75 views

Can either side of a GDPR SAR require the other to agree to ToS during the identification process?

I shall use a real situation that happened to me, but this is just to demonstrate my point. I am definitely not going to do anything about it. This is a purely theoretical question, I am not ...
User65535's user avatar
  • 7,720
0 votes
1 answer
100 views

Is "gossip surveillance" processing personal data under the GDPR?

The Guardian has an article on "gossip surveillance" where strangers report on social media private conversations they are not party to in the hope of exposing duplicity from the speakers in ...
User65535's user avatar
  • 7,720
2 votes
2 answers
176 views

Is it legal/appropriate to email a GDPR SAR to the executive team if that is the only email address the company provides?

This is prompted by this question but I am fairly sure I do not have the correct answer so I am making this one. My personal answer to "How do I get my data from company X under GDPR" is to ...
User65535's user avatar
  • 7,720
1 vote
2 answers
199 views

What are an employed/contracted software developer's responsibilities under the GDPR?

This is prompted by this question but that is rather complicated by the technical details. Suppose the following hypothetical: Alice is a software developer for Bob Inc. perhaps as a normal employee, ...
User65535's user avatar
  • 7,720
3 votes
1 answer
98 views

Can one person's genetic information be another persons personal information?

In the UK GDPR ‘personal data’ is defined as: ‘personal data’ means any information relating to an identified or identifiable natural person (‘data subject’); an identifiable natural person is one ...
User65535's user avatar
  • 7,720
8 votes
1 answer
3k views

Does GDPR apply when PII is already publicly available?

Pretend there is a website, it might be free to access, or be a paid per search service, where the users get access to summarised information on the people that they search for. All of the information ...
user5623335's user avatar
  • 1,202
4 votes
1 answer
546 views

What does "Household Exception" to the GDPR mean?

GDPR Section 2 Recital 18 (?) reads: Not Applicable to Personal or Household Activities This Regulation does not apply to the processing of personal data by a natural person in the course of a purely ...
User65535's user avatar
  • 7,720
0 votes
1 answer
43 views

To what extent was the Equality Act 2010 shaped by or did it “implement” legal provisions of the EU?

The DPA 2018 was passed pursuant to the EU GDPR to achieve uniformity across the EU in relation to matters of personal data. The unfair contract term regulations too were passed to implement EU ...
TylerDurden's user avatar
0 votes
1 answer
54 views

Do anti discrimination laws bind overseas service providers when the victims of their discrimination are in the jurisdiction of the law?

Bob lives in Birmingham or perhaps Madrid. He joins an online club operated by an overseas entity based in Peru, or perhaps Chicago. They incidentally find out that he is black and promptly cancel his ...
TylerDurden's user avatar
12 votes
3 answers
4k views

Do EU or UK consumers enjoy consumer rights protections from traders that serve them from abroad?

Bob lives in Manchester, or alternatively in Lyon. He purchases a product or service from a vendor in the USA, or perhaps Timbuktu. Do European or British consumer rights legislations bind the ...
TylerDurden's user avatar
1 vote
1 answer
89 views

Do any other consumer rights laws have extraterritorial applicability to international organisations that cater to British or European customers?

The GDPR purports to bind any organisation, wheresoever it may be based, that serves individuals based in the EU, or (as the case may be) the UK. The GDPR governs the obligations of organisations and ...
TylerDurden's user avatar
3 votes
2 answers
1k views

What is the U.K. GDPR?

I understand that the DPA implemented the GDPR in British law as an act of Parliament. Then there was Brexit, and the U.K. GDPR was introduced to stand in for the no longer binding EU GDPR, with only ...
TylerDurden's user avatar
5 votes
1 answer
95 views

Under what conditions are 3rd party works automatically subject to the OGL 1.0a?

Are 3rd party creations that are "compatible with" D&D automatically subject to the OGL (OGL 1.0a for the purposes of all references in this question), or can they be published without ...
illustro's user avatar
  • 151
2 votes
1 answer
474 views

Do contracts require pages or clauses numbered?

A question asked by another member about missing pages in a lease brings to my mind the question of whether there is a legal requirement for contract pages to be numbered so that it is e.g. obvious ...
StephenG - Help Ukraine's user avatar

15 30 50 per page
1
2
3 4 5
8