Skip to main content

All Questions

1 vote
0 answers
64 views

Is it GDPR compliant to require registration to access a privacy policy?

There is currently an issue with Windows operating systems, reputed to be related to Falcon Sensor from CrowdStrike. From the description of their tool, the question of GDPR compliance can be asked ...
User65535's user avatar
  • 7,720
6 votes
1 answer
2k views

Is deciding to use google fonts the sort of decision that makes an entity a controller rather than a processor?

In ensuring GDPR compliance determining which entities are data controllers and which data processors is a critical step. The UK government says: The UK GDPR defines a controller as: the natural or ...
User65535's user avatar
  • 7,720
0 votes
0 answers
19 views

Does the transfer occurring under Article 45, 46 or 49 affect the Right of Access under Article 15.2?

Transfer of personal data from the UK to the US can, at least in theory, occur under Articles 45, 46 and 49. These all have different requirements. Article 15 of the GDPR the Right of access includes ...
User65535's user avatar
  • 7,720
0 votes
0 answers
22 views

What does being "informed of the appropriate safeguards pursuant to Article 46" mean?

Article 15 of the GDPR the Right of access includes section 2: Where personal data are transferred to a third country or to an international organisation, the data subject shall have the right to be ...
User65535's user avatar
  • 7,720
1 vote
0 answers
45 views

How specific does the information need to be relating to personal information transfer between data controllers?

When personal information is transferred between data controllers the GDPR imposses certain requirements. Among these are information that must be provided to the data subject. As I understand it ...
User65535's user avatar
  • 7,720
1 vote
1 answer
139 views

Can computer performance metrics be personal data?

ScorecardResearch is a major data collection organisation that serves code onto some major UK web sites. Their privacy policy mentions a lot of tracking, including "hardware or device ...
User65535's user avatar
  • 7,720
8 votes
2 answers
4k views

Is it legal to discriminate on marital status for car insurance/pensions etc.?

In 2012 the European Court of Justice (ECJ) ruled that gender is no longer allowed to be a factor when premiums are calculated for "everything from pensions to car and life insurance". I ...
User65535's user avatar
  • 7,720
0 votes
3 answers
140 views

Do the various anti-end to end encryption laws have provisions concerning third party clients?

There has been multiple attempts to criminalise end to end encryption (E2E). Currently in the news is the EU Chat Control 2.0 (though it seems it has now been withdrawn), the UK passed the Online ...
User65535's user avatar
  • 7,720
3 votes
0 answers
44 views

Does there exist an example of meaningful information about an automated individual decision-making algorithm?

The GDPR Article 14 includes provisions for the data subject to have meaningful information about an automated individual decision-making algorithm that which produces legal effects concerning him or ...
User65535's user avatar
  • 7,720
0 votes
0 answers
58 views

Does the GDPR right to deletion in Art. 17 effectively include some "disproportionate effort" exception?

Some provisions of the GDPR have explicit exceptions about "disproportionate effort". Particularly relevant is the one in Article 19: The controller shall communicate any rectification or ...
User65535's user avatar
  • 7,720
1 vote
1 answer
89 views

What exactly is a decision wrt. GDPR Automated individual decision-making?

The GDPR Article 22 provides rights relating to automated individual decision-making, including profiling. It starts: The data subject shall have the right not to be subject to a decision based ...
User65535's user avatar
  • 7,720
5 votes
2 answers
167 views

How do Wi-Fi Positioning Systems interact with the GDPR?

There is a paper (described in the news) that details how to use Apple's Wi-Fi Positioning System (WPS) facilitates mass surveillance, even of those not using Apple devices. The system is described ...
User65535's user avatar
  • 7,720
0 votes
2 answers
159 views

Double Jeopardy when received a police caution?

I was curious about the application of Double Jeopardy around the world, and in particular the European Union, in the following scenario. Someone commits a crime in England, the police arrest them. ...
user5623335's user avatar
  • 1,202
0 votes
0 answers
83 views

MLAT De Minimis period?

The UK Government website covers Mutual Legal Assistance Treaty (MLAT) requests that it receives from outside of the UK. I was hoping someone could clarify the De Minimis part. Question 1: Focusing on ...
user5623335's user avatar
  • 1,202
4 votes
1 answer
113 views

What happens when data that was not personal information become personal information?

Supposed there is some data that is not associated with an individual. This data is processed by a company and distributed on the web. At a later date this data becomes associated with an individual ...
User65535's user avatar
  • 7,720

15 30 50 per page
1
2 3 4 5
8