深大(盐田)工业设计特色学院 在盐田国际创意港开学
百度 据悉,申林为了参加《奇迹时刻》的中国首秀,此次特意推迟了美国达人秀的彩排录制时间。
Questions about the European Union General Data Protection Regulation (GDPR)
1,054 questions
0
votes
2
answers
62
views
Can the GDPR be used to argue that an employer cannot look at some activity I am performing using their infrastructure?
I was reading Can an employer perform deep packet inspection under the GDPR?, where the OP is asking whether GDPR protects them from their employer running deep packet inspection. I would have ...
6
votes
3
answers
2k
views
Can an employer perform deep packet inspection under the GDPR?
My employer is using zScaler software to protect network connections, including performing deep packet (SSL/TLS) inspection. This is in the EU. My question is to what extent this is allowed under the ...
1
vote
1
answer
113
views
What effect does a statement "We will not do X" have on a data controllers right to do X?
I shall use the real example that prompted this question, but the question is only out of interest, I am not going to take any action.
TEMU requires a phone number to place an order. They have the ...
1
vote
1
answer
171
views
Is sending an anonymous client ID at app startup considered user tracking under GDPR?
I’m building an app that sends a minimal “heartbeat” to my backend whenever a user launches the app.
It includes a randomly generated, persistent, anonymous client ID (no names, emails, or device info)...
1
vote
1
answer
150
views
UK company DSAR query: right to retrieve WhatsApp messages for overseas members of a group
Alice is a non-employed, unpaid director of a UK not-for-profit company.
The board is made up of unpaid directors like Alice, from various countries, plus the full-time, UK-based (paid) Executive ...
4
votes
1
answer
175
views
How broadly does age verification allow personal data sharing?
Web sites are required to have age verification by July in the UK, and in recent days the requirements for the tech has been in the news from the EU and Texas.
One method approved by the UK regulator ...
1
vote
1
answer
141
views
If someone tells you something might happen, do you know it happened for the purpose of the GDPR Art. 14?
Suppose Alice, a natural person residing in the UK/EU, patronises Bob Inc. and gives Bob her email address. Bob says "I might give this to Charlie Co.". After she leaves Bob Inc. does in ...
-1
votes
1
answer
85
views
Are the household exemption and automated decision making provisions under the UK GDPR still viable when platforms use AI?
I'm curious to understand and know whether or not the household exemption and automated decision-making provisions under the UK GDPR remain viable when platforms use AI to transform personal ...
2
votes
1
answer
120
views
Does triggering google analytics prior to consent constitute a gdpr breach?
I am an academic researcher investigating GDPR compliance on gambling websites. During my analysis, I use browser developer tools to examine third-party data transfers occurring before the user gives ...
3
votes
0
answers
107
views
Does using Window Recall and video calls generate additional GDPR responsibilities?
Microsoft Windows 11 Release Preview channel for Copilot+ PCs has the Recall feature activated, and it is suspected it is likely to be available more widely in the near future. This silently takes ...
0
votes
0
answers
22
views
How much information on hacking events does the GDPR require to be given to the data subject?
It is in the news that targets of hacking have been informed by their service providers of the intrusion, but it sounds like the information a long way from a complete record of the investigation:
...
5
votes
1
answer
739
views
GDPR subject access request for short-lived data
Suppose someone makes a GDPR subject access request for data that is always deleted after less than the required response period, (eg: CCTV footage that gets overwritten every 14 days). Does this ...
-1
votes
1
answer
80
views
DSAR Request to company which holds data on behalf of clients, but which shares this data to a wider audience (UK) [closed]
Thanks in advanced for any help which anyone can offer on this matter.
It has recently come to my attention that an organisation holds data about me, some of which is shared (in the form of metadata ...
0
votes
0
answers
96
views
Can an EU resident sue a US company for violating GDPR? [duplicate]
Can a US company that doesn't have a physical EU presence be sued for violating GDPR?
5
votes
2
answers
708
views
How does schedule 7 of the Terrorism Act 2000 interact with the GDPR?
Schedule 7 of the Terrorism Act 2000 says you must give an examining officer any information they request:
5 A person who is questioned under paragraph 2 or 3 must—
(a) give the examining officer any ...