All Questions
Tagged with united-kingdom gdpr
20
questions
4
votes
1
answer
261
views
Was my GDPR request not complied with?
On the 12th of December I made a GDPR request to a major online retailer in the UK.
While there was a minor email exchange with a chatbot to confirm the request, I neither received the requested ...
1
vote
1
answer
112
views
How far up the chain of internet provision does my GDPR responsibility go?
Say I host a web page on my computer, and you visit that site from somewhere in Europe. The web server on my computer will know your IP address, and I can choose to "forget" it as soon as ...
60
votes
4
answers
20k
views
Does GDPR include UK customers, or not anymore?
Now that Brexit happened, does GDPR include UK customers, or not anymore?
30
votes
2
answers
5k
views
Accessing public CCTV footage about you
Near me there is a private property which has CCTV aimed away from their property and towards public walkways. I walk past these cameras on a daily basis and they're literally inches away from my face....
10
votes
4
answers
5k
views
Is there a way to determine if an email address is personal information?
The GDPR defines personal data as:
Personal data is information that relates to an identified or identifiable individual.
My understanding is that this means that [email protected] is ...
8
votes
1
answer
2k
views
Deducing and using an email address under GDPR
I was recently contacted on a work email address by a recruiter, working from a private recruitment agency. I have had no prior contact with this recruiter or agency before this.
The work email ...
6
votes
1
answer
157
views
Do marketing emails require consent?
I am getting spammed with marketing emails from Tough Mudder. Their unsubscribe link takes me to a page where I have to either accept the fact they will send me emails or unsubscribe from everything, ...
4
votes
1
answer
1k
views
GDPR Legislation and user invites by email
I want to understand what the implications are for user emails with the onset of GDPR.
It's a bit of a strange question but here is the scenario.
We run a Software as a Service platform when a user ...
4
votes
1
answer
336
views
GDPR unbelievable legitimate interest. What action to take?
If a website is claiming legitimate interest in data collection in a way that is unbelievable is there any action that a web site visitor can take?
For example, if one was to visit The Daily Mail you ...
2
votes
1
answer
306
views
Using GDPR against cold-call marketing emails
I recently received a "cold-call" email from a salesman to my professional email address, which is in the form [email protected]. The firstname is a very formal version unlikely to be ...
2
votes
1
answer
181
views
Under what circumstances is it lawful or unlawful for police to disclose one's information to third parties, e.g. complainants?
Is it basically neither prohibited nor required and thus entirely to police discretion as to whether or not to disclose parties' details to either their purported victims, or to other parties like ...
2
votes
1
answer
185
views
Does the GDPR cover reference to court proceedings?
On this site many good answers are referenced by real court cases, usually in the form Surname vs. Surname [date] <link to further details>. There also exist documents (example is US so as not ...
2
votes
2
answers
177
views
Is it legal/appropriate to email a GDPR SAR to the executive team if that is the only email address the company provides?
This is prompted by this question but I am fairly sure I do not have the correct answer so I am making this one.
My personal answer to "How do I get my data from company X under GDPR" is to ...
1
vote
2
answers
199
views
What are an employed/contracted software developer's responsibilities under the GDPR?
This is prompted by this question but that is rather complicated by the technical details. Suppose the following hypothetical:
Alice is a software developer for Bob Inc. perhaps as a normal employee, ...
1
vote
1
answer
286
views
What exactly triggers the GDPR Article 14?
Article 14 of the GDPR concerns the requirement for a data controller to inform the data subject when they obtain personal data has been obtained from an entity that is not the data subject:
Art. 14 ...