Skip to main content

Questions tagged [gdpr]

Questions about the European Union General Data Protection Regulation (GDPR)

1 vote
1 answer
113 views

What effect does a statement "We will not do X" have on a data controllers right to do X?

I shall use the real example that prompted this question, but the question is only out of interest, I am not going to take any action. TEMU requires a phone number to place an order. They have the ...
Mike's user avatar
  • 307
0 votes
1 answer
146 views

Is sending an anonymous client ID at app startup considered user tracking under GDPR?

I’m building an app that sends a minimal “heartbeat” to my backend whenever a user launches the app. It includes a randomly generated, persistent, anonymous client ID (no names, emails, or device info)...
Samuel Müller's user avatar
1 vote
1 answer
137 views

UK company DSAR query: right to retrieve WhatsApp messages for overseas members of a group

Alice is a non-employed, unpaid director of a UK not-for-profit company. The board is made up of unpaid directors like Alice, from various countries, plus the full-time, UK-based (paid) Executive ...
chamomilelawn's user avatar
3 votes
1 answer
155 views

How broadly does age verification allow personal data sharing?

Web sites are required to have age verification by July in the UK, and in recent days the requirements for the tech has been in the news from the EU and Texas. One method approved by the UK regulator ...
Mike's user avatar
  • 307
1 vote
1 answer
140 views

If someone tells you something might happen, do you know it happened for the purpose of the GDPR Art. 14?

Suppose Alice, a natural person residing in the UK/EU, patronises Bob Inc. and gives Bob her email address. Bob says "I might give this to Charlie Co.". After she leaves Bob Inc. does in ...
Mike's user avatar
  • 307
-1 votes
1 answer
71 views

Are the household exemption and automated decision making provisions under the UK GDPR still viable when platforms use AI?

I'm curious to understand and know whether or not the household exemption and automated decision-making provisions under the UK GDPR remain viable when platforms use AI to transform personal ...
PaoloRossi's user avatar
2 votes
1 answer
112 views

Does triggering google analytics prior to consent constitute a gdpr breach?

I am an academic researcher investigating GDPR compliance on gambling websites. During my analysis, I use browser developer tools to examine third-party data transfers occurring before the user gives ...
DarkPatternsResearcher's user avatar
3 votes
0 answers
106 views

Does using Window Recall and video calls generate additional GDPR responsibilities?

Microsoft Windows 11 Release Preview channel for Copilot+ PCs has the Recall feature activated, and it is suspected it is likely to be available more widely in the near future. This silently takes ...
User65535's user avatar
  • 10.3k
0 votes
0 answers
22 views

How much information on hacking events does the GDPR require to be given to the data subject?

It is in the news that targets of hacking have been informed by their service providers of the intrusion, but it sounds like the information a long way from a complete record of the investigation: ...
User65535's user avatar
  • 10.3k
5 votes
1 answer
730 views

GDPR subject access request for short-lived data

Suppose someone makes a GDPR subject access request for data that is always deleted after less than the required response period, (eg: CCTV footage that gets overwritten every 14 days). Does this ...
Tom V's user avatar
  • 467
-1 votes
1 answer
66 views

DSAR Request to company which holds data on behalf of clients, but which shares this data to a wider audience (UK) [closed]

Thanks in advanced for any help which anyone can offer on this matter. It has recently come to my attention that an organisation holds data about me, some of which is shared (in the form of metadata ...
Chris's user avatar
  • 1
0 votes
0 answers
95 views

Can an EU resident sue a US company for violating GDPR? [duplicate]

Can a US company that doesn't have a physical EU presence be sued for violating GDPR?
Stack Exchange Broke The Law's user avatar
5 votes
2 answers
691 views

How does schedule 7 of the Terrorism Act 2000 interact with the GDPR?

Schedule 7 of the Terrorism Act 2000 says you must give an examining officer any information they request: 5 A person who is questioned under paragraph 2 or 3 must— (a) give the examining officer any ...
User65535's user avatar
  • 10.3k
1 vote
0 answers
264 views

How do I object under GDPR to Microsoft GitHub sending me "free access to GitHub Copilot"? [closed]

Like millions of others, I've received a marketing email from Microsoft GitHub, "You have free access to GitHub Copilot" (announcement). I didn't find a way to unsubscribe: the unsubscribe ...
Nemo's user avatar
  • 128
12 votes
3 answers
590 views

Using AI assistants in virtual meetings

As of Friday I became aware of otter.ai as it was used in one of my online interviews. I'm not seeking legal advice about the situation but it has certainly raised some big questions for me on the ...
roganjosh's user avatar
  • 427

15 30 50 per page
1
2 3 4 5
71