Questions tagged [data-protection-act]
14 questions
8
votes
1 answer
Does GDPR apply when PII is already publicly available?
Pretend there is a website, it might be free to access, or be a paid per search service, where the users get access to summarised information on the people that they search for.
All of the information this website displays has been taken from public…
user5623335
- 1,374
- 2
- 14
- 34
4
votes
1 answer
Does the Colorado Privacy Act apply to churches with memberships (ex: Jehovah’s Witnesses)?
Suppose a person living in Colorado is a registered member of a church. In this church, certain “blessings” are considered contingent on your membership. Membership is recorded on a digital system.
This church also considers donations to it a…
moonman239
- 3,076
- 4
- 25
- 42
4
votes
1 answer
Is it a breach of GDPR and DPA to say a colleague is sick and off work?
This is a hypothetical question. Suppose a customer calls asking for a colleague, call her Alice, and Bob answers the phone and tells the customer that Alice is off sick with the flu. The customer then says he will call back next week when she's…
Heddy
- 670
- 1
- 6
- 23
3
votes
2 answers
Access rights to professional photographs
An independent professional photographer uses a sales tactic of candidly taking photos of others in public and then approaching them and offering them copies for a price. Suppose one of these photographed subjects turns around and…
TylerDurden
- 11,476
- 3
- 33
- 105
3
votes
2 answers
What is the U.K. GDPR?
I understand that the DPA implemented the GDPR in British law as an act of Parliament. Then there was Brexit, and the U.K. GDPR was introduced to stand in for the no longer binding EU GDPR, with only very few minor differences. Why was the U.K. GDPR…
TylerDurden
- 11,476
- 3
- 33
- 105
1
vote
1 answer
Are data controllers required to acquire the means to appropriately redact data for disclosure to subjects?
Bob appears in CCTV footage that is held by all of ACME, BCME & CCME, but also features Alice and Charles. He requests access to the footage from all of the companies and receives three different responses from each:
ACME painstakingly goes through…
TylerDurden
- 11,476
- 3
- 33
- 105
1
vote
0 answers
Does the GDPR/data protection act contain any anti-reprisal provisions?
The Information Commissioner's Office ICO advisers state that one “shouldn't” be treated any directly or less favourably as a result of exercising one’s rights under the legislation. What legal provision backs this?
Does some section of the data…
TylerDurden
- 11,476
- 3
- 33
- 105
1
vote
1 answer
Does 2 party consent apply if the data is anonymized?
If I have a text conversation between myself and another party, both of whom reside in 2 party consent states in the US, if I remove all reasonably identifying information, do I still need consent from the other person to use the data? Does this…
belkarx
- 244
- 1
- 9
1
vote
2 answers
Is the local presence of a foreign non-GDPR state a data controller subject to the provisions of the Data Protection Act 2018?
Consider that state X is not subject to the gdpr, however, it has a diplomatic presence in the UK.
If the state were a tech company that operated in or even simply offered services to people in, the UK, then they would be data controllers and bound…
JosephCorrectEnglishPronouns
- 6,409
- 4
- 31
- 75
0
votes
1 answer
Is OpenAI/ChatGPT compliant with GDPR, if they don't allow changing or removing the Phone Number and Email Address?
Italy has recently banned ChatGPT, and is now allowing it again in the country, after they implemented a few privacy controls.
The fact that it's now allowed again makes me wonder if Italy (and the rest of EU) is "finally happy" with ChatGPT,…
GDPR
- 47
- 3
0
votes
1 answer
Is it legal to store Singapore user data outside Singapore?
I am based out of india and has intent to launch the website in Singapore for singapore usesr where datastores and webservers will be hosted on data center in india. Is there any data protect act in singapore which does not allow to store the data…
M Sach
- 109
- 2
0
votes
0 answers
Compensation for a data breach by a company under a non-notified law DPDP act 2023
This is to understand the applicable law on a certain day in India and specifically about laws that are published by gazette notification but are awaiting a followup rule publication.
Representative Chronology:
Day 1: IT act 2000 is passed and has…
fvq
- 1
- 1
0
votes
3 answers
Using phonebooks or public data for commercial purposes, GDPR
I'm wondering if it is legal for individuals or companies to use phonebook data for commercial purposes, such as contacting people found on the phone book to sell them products or services, or even selling that data to companies as leads so that…
Michael
- 1
-1
votes
1 answer
Restricting processing of data provided to police
Suppose that a person A would like to report a crime of which they’ve become a victim, to the police. For this purpose the police typically require the victim’s date of birth in order to create a crime report.
With one’s date of birth, police are…
TylerDurden
- 11,476
- 3
- 33
- 105