Law Stack Exchange
Law Stack Exchange

Questions tagged [data]

74 questions
23
votes
2 answers

Is it illegal for a firm to train an AI model on a CC BY-SA 4.0 corpus and make a commercial use of it without distributing the model under CC BY-SA?

https://meta.stackexchange.com/q/388551/178179 mentions that SE will force some firms to pay to be allowed to train an AI model on the SE data dump (CC BY-SA licensed) and make a commercial use of it without distributing the model under CC…
Franck Dernoncourt
  • 7,791
  • 4
  • 46
  • 91
14
votes
1 answer

Brute force, mass image production copyright trolling?

Let's say I have an "infinite computer" that could iterate through and generate 1000x1000px images iterating through all colour combinations (I understand there would be waaaaaay too much data, but let's suppose). Then I go and claim these images as…
personjerry
  • 215
  • 2
  • 9
13
votes
1 answer

Does the German GDPR require storing the data in a German datacenter for a tele-health company?

I co-founded a tele-health startup, we are expanding to Germany, we have gone through the GDPR, and implemented most of it, however, we didn't quite understand the data residency part and found conflicting information online. Should the data be…
ali.bh
  • 233
  • 2
  • 7
12
votes
3 answers

Legality of Using Unofficial API

I have discovered a mobile app's backend API through reverse engineering. The public can access this API and it does not require specific authorization, however, it is not documented and it is not an official API that the public is meant to access.…
Tim
  • 139
  • 1
  • 7
10
votes
4 answers

Is a company liable if someone leaves their bank logged in on a company PC?

If a company sets up computers in a break area for employees to access their timecard, payroll, bank accounts, etc., can the company get in trouble if an employee leaves their private accounts logged in?
Randy Miller
  • 103
  • 1
  • 4
10
votes
4 answers

Does derivative works law allow someone to create a new work based on an old one as long as they make modifications?

How can I find out if extracting Microsoft Word 2019 thesaurus (for another person by a freelancer) is legal or (very likely) not? I tried searching in Google, but this question seems to be not very easy to answer. The client says that it is allowed…
082021
  • 111
  • 3
8
votes
3 answers

Must public content/data created by a US city have an open license?

I read on https://resources.data.gov/open-licenses/ that works created by U.S. Government employees within the scope of their employment default to the public domain: The Federal Open Data Policy states: “Agencies must apply open licenses, in…
Franck Dernoncourt
  • 7,791
  • 4
  • 46
  • 91
7
votes
2 answers

If a company actively and knowingly displays user passwords to their staff, is it breaking GDPR laws?

I used to work for a company, where they have a team of moderators, who actively monitor which accounts are scammers etc. To monitor this they can find links between user accounts via a users password, so they are able to see all user passwords in…
Tom
  • 73
  • 3
6
votes
2 answers

Is a sent email in someone else’s inbox subject to data subject rights of the sender?

Suppose Bob emails Alice, and both use Hotmail for their e-mail provider. Bob then deletes the message from his sent mail folder. Could Bob issue a subject access request (SAR) to Hotmail for the message (provided it is in fact still) held by…
TylerDurden
  • 11,476
  • 3
  • 33
  • 105
6
votes
1 answer

Can a company charge you to update your address under GDPR?

I was just charged £30 (over the phone) to update my address with an insurance company. I didn't contest it at first and pulled out my wallet to pay the fee and did. However, while I was on the phone it got me thinking about the ethics and even the…
metaDesign
  • 163
  • 4
6
votes
3 answers

Locally stored PII: Are we a GDPR Data Processor?

We are a charity that uses software to keep names and addresses of it's members. Email addresses and Emergency Contacts. We use a piece of software that is NOT cloud based. It is installed on the Secretaries pc. The software provider CANNOT see any…
Andy C
  • 63
  • 4
5
votes
4 answers

Supreme Court Cases That Have Been Decided on Statistical Evidence---Are There Any?

Have there been any Supreme Court cases that have been decided based on statistical evidence? If so, which ones; and what was the evidence presented? In 1897, Oliver Wendell Holmes (before he became a Supreme Court judge) had said in a speech at…
DDS
  • 1,347
  • 8
  • 25
4
votes
1 answer

Does the Colorado Privacy Act apply to churches with memberships (ex: Jehovah’s Witnesses)?

Suppose a person living in Colorado is a registered member of a church. In this church, certain “blessings” are considered contingent on your membership. Membership is recorded on a digital system. This church also considers donations to it a…
moonman239
  • 3,076
  • 4
  • 25
  • 42
4
votes
1 answer

How does GDPR's right to erasure apply to deduplicated storage?

I am trying to understand GDPR's right to erasure (and principle of storage limitation) in the following case: Company A offers a online data storage service that is intended to be used by the users of other companies (e.g. company A hosts a FTP…
Tomas
  • 43
  • 4
4
votes
1 answer

Would revealing/storing whether or not an EU customer uses a service violate the GDPR?

Some web services will notify the user if the account name they are entering exists or not. However, I am wondering if this would be legal? For example, if someone entered the email address of someone in the E.U., you would inadvertently be leaking…
Christopher King
  • 1,754
  • 3
  • 16
  • 21
1
2 3 4 5