If a no-deal Brexit happens will EU provisions on reverse engineering be nullified? As it stands the UK implements an EU law which prevents the reverse engineering of proprietary software with few exceptions, could this change once we leave the EU?
There are two kinds of EU laws: regulations and directives. Regulations have direct effect throughout the EU, which helps harmonize the laws of the Single Market. Directives instruct the member states to implement their own laws to some effect, which helps adapt the laws to that member state's circumstances. Reverse engineering is the subject of the EU Computer Programs Directive. As a directive it has no direct effect in the UK. The directive was implemented by amending the UK's Copyright, Designs and Patents Act 1988. The Copyright Act is UK law, created by parliament and not the EU. It will continue to be in effect even after a Brexit. Note that many EU regulations also have corresponding passages in UK law, for example the Data Protection Act 2018 mirrors the GDPR. And per the European Union (Withdrawal) Act 2018, all relevant EU laws will be transformed into domestic UK law upon exit day, including the principle of supremacy of (ex-)EU law over domestic law. That way, the regulatory environment doesn't suddenly change. So even if reverse engineering were the subject of an EU regulation, it would continue to apply after Brexit and would supersede pre-Brexit UK laws to the contrary.
There is nothing extraterritorial about these laws. If a company sells a good or provides a service to individuals based in the EU, then this good or service has to comply with EU laws. This concept is self-evident for physical goods that are produced anywhere in the world and then sold in the EU and the GDPR just applies this concept to services provided over the internet. The same legal concept also holds in all other major jurisdictions. The only thing that makes this more complicated for the GDPR is the actual enforcability of these laws but that is a technical issue not a legal one.
Per Art 3(2), GDPR only applies to non-European companies when their processing activities relate to the offering of goods or services to people in Europe, or when the processing activities relate to monitoring people in Europe. However, the word “offer” of this targeting criterion requires some level of intent. It is not enough for GDPR to apply that they're marketing to someone who happens to be in Europe, but GDPR would apply if they are intentionally marketing to people who are in Europe. I don't know what they are marketing, so I don't know if that would be the case here. Even if GDPR were to apply, it would not be the most appropriate law. Yes, there's the GDPR right to erasure, which applies under some conditions (though there's a pretty absolute right to opt-out from marketing). The EU's ePrivacy Directive provides more specific rules though, in particular that every such marketing email must offer a way to unsubscribe. Other countries have comparable anti-spam laws, potentially also the home country for this online service.
The GDPR actually does require you to follow DNT in Article 21: In the context of the use of information society services, and notwithstanding Directive 2002/58/EC, the data subject may exercise his or her right to object by automated means using technical specifications. I think this is quite explicit.
Isn’t this discrimination since nationals do not have to apply? Yes it is discrimination. But that does not make it illegal. In fact discrimination is in general legal unless it is based on some characteristic which is specifically forbidden as a basis for discrimination (e.g. race). And in general, all of the countries in the world allow and enforce discrimination based on nationality; for example non-nationals will not be able to run for Head of State (and additional restrictions may apply). The EU members allowing similar rights to the citizens of other EU countries is the exception, not the rule, and once the UK stops being bound by EU treaties it can impose its own legal system on non-nationals. And while EU treaties give lots of rights to EU member-countries citizens, they still allow for discrimination based on nationality (for example you cannot run for Prime Minister or MP of Spain as a foreign EU resident). Isn’t the UK Government breaking the law? This could go against EU treaties, but the point is that the UK will no longer need to comply with them. is the UK Government responsible for the harm and distress caused to the individual health and mental wellbeing? No, the UK Government is not responsible if you do not like its laws to the point that it affects your health. Is there any ground for challenging this scheme legality in court? Unlikely. In any case it will not be because you are frightened by it, any challenge would be in the grounds that the government actions act against some other UK law. For example, if the decision to make such a list was made by the Executive but it contradicts some law approved by the Parliament. If this list does not contradict any law, then there are no grounds for challenging it. Would there a breach of my human rights if I was not to apply for settle status and then subsequentially got deported (taken away from my children, home, business, etc.)? How about if I was refused, re-entry or access to public services (NHS for example)? If you do not apply you will not have any evidence that you were settled, and the government could legitimately believe that you are irregularly in the country and try to expel you; you probably would have an opportunity to prove that you were settled even if you were not in the list but that could be way slower, more expensive, riskier and stressful than just registering now. Get this clear: that settled person list is to help you to show that you were a UK resident before Brexit and to give you the protections that are being negotiated between the UK and the EU for expatriates. Probably you could choose not to enlist, but it would work against you.
I wrote a letter to the Eclipse Foundation. The consultant pointed me to section 5 in their FAQ. My case falls under the term "linking". He warned that he isn't a lawyer, but offered the following short answer: The Eclipse Foundation does not consider linking with EPL content to be a derivative work and so you are not required to disclose your source code.
It seems that you don’t understand what parody is. If you do understand, please explain how it’s even possible to parody computer code. What you can do with “open source” code depends on the licence the copyright holder(s) release it under. For some very permissive licences you can do what you suggest, for most, you can’t.
The data processor is not responsible for complying with the GDPR. You are ultimately responsible, since you are the data controller. The data processor is merely required to assist you, but it's unclear what that means in the presented scenario. Per Art 28(3)(e) GDPR, the DPA must require the data processor to provide reasonable assistance: That contract or other legal act shall stipulate, in particular, that the processor: […] taking into account the nature of the processing, assists the controller by appropriate technical and organisational measures, insofar as this is possible, for the fulfilment of the controller’s obligation to respond to requests for exercising the data subject’s rights laid down in Chapter III; However, per Art 28(1) you can only engage processors that you deem sufficient to protect the data subject's rights: the controller shall use only processors providing sufficient guarantees to implement appropriate technical and organisational measures in such a manner that processing will meet the requirements of this Regulation and ensure the protection of the rights of the data subject. Here, it seems that your company failed to ensure that the processor provides the features you need for compliance. Many companies claim to be GDPR-compliant, but that doesn't mean that your use of their services will be GDPR-compliant as well. Depending on how the Art 28(3)(e) requirement was implemented in the DPA you may have a right to assistance even if the processor doesn't implement necessary features in their software, but enforcing this contract could require a lawsuit in a foreign jurisdiction (but that's par for the course for international B2B contracts). It is worth noting that the GDPR right to erasure doesn't always apply. In a processing activity where no erasure right is likely to arise, it would be perfectly fine to use a data processor that doesn't offer any possibility for erasure. Similarly, it can sometimes be legal to use technologies like Blockchain or Git that make erasure difficult or impossible. However, it is the responsibility of the data controller to analyze the impact of such a choice up front, before commencing the processing activities. In some cases, this could require a Data Protection Impact Assessment (DPIA). Note that transfers of personal data into the US are illegal or at least questionable in the wake of the 2020 Schrems II ruling. The Privacy Shield is no longer a legal basis for such transfers. Standard Contractual Clauses (SCCs) are technically allowed, but only “on condition that enforceable data subject rights and effective legal remedies for data subjects are available” (cf Art 46). The ECJ's judgement calls this into question. This could be a further incentive to migrate to a more GDPR-compliant service.