Skip to main content

All Questions

Tagged with
3 votes
2 answers
1k views

What is the U.K. GDPR?

I understand that the DPA implemented the GDPR in British law as an act of Parliament. Then there was Brexit, and the U.K. GDPR was introduced to stand in for the no longer binding EU GDPR, with only ...
TylerDurden's user avatar
4 votes
1 answer
1k views

Is it a breach of GDPR and DPA to say a colleague is sick and off work?

This is a hypothetical question. Suppose a customer calls asking for a colleague, call her Alice, and Bob answers the phone and tells the customer that Alice is off sick with the flu. The customer ...
Heddy's user avatar
  • 641
0 votes
1 answer
84 views

Practical implications of failing to follow GDPR for online businesses

Suppose a person based in UK has started a one-man business online, for example, a web blog where people can read articles and post comments. Now, the business owner is focused on testing out the ...
Adden's user avatar
  • 35
-1 votes
1 answer
37 views

Restricting processing of data provided to police

Suppose that a person A would like to report a crime of which they’ve become a victim, to the police. For this purpose the police typically require the victim’s date of birth in order to create a ...
TylerDurden's user avatar
0 votes
1 answer
336 views

Would it be illegal to forward CCTV footage of someone committing a crime to their employer? (UK)

An incident has occurred where an individual in a private business committed an offence (common assault/battery). As expected the police seem fairly unmotivated or interested however a quick Google ...
Ldweller's user avatar
  • 135
3 votes
1 answer
943 views

Am I allowed to use US web hosting according to GDPR

I live in UK, and I own a super simple website (web blog). The users of my website are not required to log in or provide any kind of personal information, they are just readers of my content. I used ...
lohowe's user avatar
  • 31
-2 votes
1 answer
67 views

Why do some data controllers require two forms of ID and others only one?

Meet Bob. Bob has submitted a number of subject access requests to various data controlling bodies, including businesses and several police forces. Some police forces simply require scan of id with ...
JosephCorrectEnglishPronouns's user avatar
0 votes
1 answer
77 views

Practical GDPR guidance for online businesses

When you start an online business, or even just create a website, there is a lot of confusion on what needs to be done to comply with GDPR. As many online resources (including StackExchange) suggest, ...
holdenmcgrohen's user avatar
4 votes
2 answers
236 views

What is the lawful basis for running Know Your Customer (KYC) checks on startup investors?

Suppose you have a startup that raises money from a number of angel investors, many of whom are investing as natural persons. What is the lawful GDPR basis for processing the investors' personal data, ...
Paul Razvan Berg's user avatar
-1 votes
1 answer
38 views

What are good tips and tricks to keep in mind when performing a subject access request for a comprehensive record of self-pertinent data from the met? [closed]

Bob would like to obtain as comprehensive as possible am archive of all data held on him by the metropolitan police, as well as any other police networks that they may be part of and share data with/...
JosephCorrectEnglishPronouns's user avatar
1 vote
1 answer
286 views

What exactly triggers the GDPR Article 14?

Article 14 of the GDPR concerns the requirement for a data controller to inform the data subject when they obtain personal data has been obtained from an entity that is not the data subject: Art. 14 ...
User65535's user avatar
  • 7,810
10 votes
4 answers
5k views

Is there a way to determine if an email address is personal information?

The GDPR defines personal data as: Personal data is information that relates to an identified or identifiable individual. My understanding is that this means that [email protected] is ...
User65535's user avatar
  • 7,810
1 vote
1 answer
103 views

Is satelite data personal data?

It is in the news that artificial intelligence (AI) has been applied to aerial photography to identify homeowners who have made unauthorised additions of swimming pools to their properties in France. ...
User65535's user avatar
  • 7,810
1 vote
1 answer
35 views

Responsabilities on data breaches UK Data Protection Act

Following a question from THIS StackExchange about Data Protection Act application in the UK, there is an aspect about "proactivity" and "responsabilities" that I do not fully ...
Javier Gonzalez Moncayo's user avatar
0 votes
1 answer
59 views

Does the UK have a (enforcable) law linked with the Data Protection Act to control document's metadata?

Reading the information on the ICO's website, I came across a few items mentioning how to handle metadata on my organization's workflow like THIS or THIS. I noticed they use expressions like "...
Javier Gonzalez Moncayo's user avatar

15 30 50 per page
1 2
3
4 5
8