Skip to main content

All Questions

Tagged with
0 votes
2 answers
55 views

If you recieve others PII as part of the response to a GDPR SAR do you become a data controller?

Say Alice makes a GDPR Subject Access Request of a data controller, and in response receives some of Bob's Personally Identifiable Information, does the Alice then become a data controller with ...
User65535's user avatar
  • 7,810
2 votes
1 answer
181 views

Under what circumstances is it lawful or unlawful for police to disclose one's information to third parties, e.g. complainants?

Is it basically neither prohibited nor required and thus entirely to police discretion as to whether or not to disclose parties' details to either their purported victims, or to other parties like ...
JosephCorrectEnglishPronouns's user avatar
0 votes
2 answers
134 views

Any obligation to disclose one's name and address to private parties for service of civil claims after a street altercation?

Suppose A is walking down the street and B punches A in the nose, thus committing assault. Legally, A is entitled to claim civil damages against B, and can practically do so if they know A's name and ...
JosephCorrectEnglishPronouns's user avatar
0 votes
1 answer
47 views

Under GDPR, do organisations have to tell the ICO (or similar) the email address they use for GDPR deletion requests?

As is well known, websites (illegally) use deliberately misleading and frustrating web design to slow down users who want to tell them not to collect information for marketing purposes. If they ...
Ne Mo's user avatar
  • 241
1 vote
2 answers
63 views

Limits of automated decision making WRT workplace surveys

As part of the GDPR, if personal data is used for automated decision making a number of rules apply, particularly regarding consent and access to data. A number of companies offer workplace surveys, ...
User65535's user avatar
  • 7,810
2 votes
1 answer
102 views

UK - Privacy Policy requirements for website with no tracking

Essentially I run a website which is a microblog for anyone to use. The user who creates the content does so on one domain which requires login, stores a cookie etc.. The reader (user) of the blog ...
William Isted's user avatar
10 votes
2 answers
3k views

Can I store the names of arbitrary business associates in my CRM system?

I'm running an agency and I would like to store the names of employees of my client's companies to help me build client relationships. For example, "Gina works on reception." Is this allowed ...
Jordan Regan's user avatar
1 vote
1 answer
62 views

Does an email hop in the US count as an international data transfer?

Alice is a data subject, Bob Inc. is a data controller processing her PII, both located in the UK. In responding to a subject access request, Bob Inc. sends some PII in plain text in an email. ...
User65535's user avatar
  • 7,810
1 vote
1 answer
99 views

Does the GDPR apply to reference managers?

Reference managers are software products that record the details of scientific papers that one interacts with. All academics and many others use them as a crucial tool of their work. Common examples ...
User65535's user avatar
  • 7,810
0 votes
1 answer
194 views

Is my name and email address being sent to another customer a GDPR violation?

An agency, to which I provided my personal email address (contains my full name), has emailed me and another of their customers (both emails in "TO" field). The other customer and I have ...
Griffin's user avatar
  • 97
2 votes
1 answer
185 views

Does the GDPR cover reference to court proceedings?

On this site many good answers are referenced by real court cases, usually in the form Surname vs. Surname [date] <link to further details>. There also exist documents (example is US so as not ...
User65535's user avatar
  • 7,810
12 votes
2 answers
2k views

Does the Companies Act 2006 trump an individual's right to be forgotten?

I once was a contractor and ran a limited company. At the time all my details and my secretary's were published on the Companies House website. edit: This information includes full names and addresses....
iwarv's user avatar
  • 231
2 votes
2 answers
2k views

How does the personal/household activity exemption not apply to domestic CCTV pointed to the street?

I am surprised to learn that, in the UK, private/domestic CCTV cameras pointed to the public street make the owner GDPR controller — with all the consequences like having to respond to data requests ...
Greendrake's user avatar
  • 27.8k
30 votes
2 answers
5k views

Accessing public CCTV footage about you

Near me there is a private property which has CCTV aimed away from their property and towards public walkways. I walk past these cameras on a daily basis and they're literally inches away from my face....
dollar bill's user avatar
3 votes
1 answer
126 views

If one requests bodycam footage of a police encounter involving another person, would they be notified of the request?

If party A calls the police on party B and they attend, then party B is entitled to request the bodycam footage of the encounter under the GDPR. If party B performs such a request, and party A appears ...
Ohan's user avatar
  • 777

15 30 50 per page
1 2 3
4
5
8