Creating a social network account without consent One of my colleague that does not want to be on any social network was a bit harassed by another colleague that treat him of paranoid. So this other college start to create a Facebook account with lot's of personal information of my first colleague, name, work, photo etc... And he start to add some friends that he knows they know each other, well you see the point. My colleague does not want to be on Facebook but does not even have the password of the account. What can he do? Is that impersonation?
Impersonating someone else on Facebook is against Facebook's TOS. It could also be a criminal offense, depending on local/national jurisdictions. Someone who is being impersonated on Facebook can file a complaint with Facebook; see How do I report an account or Page that’s pretending to be me or someone else? | Facebook Help Center | Facebook. If it is a criminal offense, depending on local/national jurisdictions, a local prosecutor will need to be involved.
If they are recording you, you can record them Assuming that recording requires two-party consent (not all places do), when they informed you that the call may be recorded, they gave consent to it being recorded (obviously) and you gave consent by not hanging up. The consent requirement has been met so anyone and everyone can record it.
Intent would greatly factor into the case. As mentioned, possession of child pornography is illegal. There was a case, where a man had inadvertently downloaded such images. In the case, it was shown that there was sufficient evidence that it was accidental and without his knowledge. Presumably, if you by happenstance created an identical code through encryption/compiling, there would be a lack of evidence of intent or evidence of your intended use. For example, your stored password manager file happens to store data identical to an illegal image. The password manager output is provable and repeatable to show that it was simply circumstantial. If you have hundreds of such outputs that all "just happen to be illicit images" you would probably fall on the wrong side of reasonable doubt. As to whether you can keep the data, the programmers for the password manager would probably update their system to modify the output to avoid bad press. The general idea is that the "illegal number" is so incredibly specific that accidental cases are very unlikely to occur, and if it did, that there would be forensic evidence indicating intent and use.
Laws against such actions are not stated in terms of popular and fluid concepts like "computer virus", they are stated in terms of clear concepts like "unauthorized access". There are federal and state laws against this. This web site lists and links to all of the state laws on the matter. There is also a federal law: a detailed legal analysis by DOJ is given here. There are some limits to federal jurisdiction, for example "protected computers" include "computers used in or affecting interstate or foreign commerce or communication". The term "affecting interstate or foreign commerce or communication" is widely used in federal law, and can be used to prohibit growing feed for your own animals. Anything that you "send" clearly affects interstate commerce (the internet is internationally connected). 18 USC 1030(a) says Whoever ... (2) intentionally accesses a computer without authorization or exceeds authorized access, and thereby obtains...(C) information from any protected computer Essentially, a computer connected to the outside world is protected. The key here is "without authorization". If you authorize MS to report back stuff about your computer, that is not unauthorized. It may not be possible to use their product without giving such authorization, in which case you can use a different product that doesn't require that you grant authorization. There is also the possibility that some software producer has technically violates the law because they think that it's okay for them to access the computer as long as they do no harm. Typically, people are not aware that they have granted software publishers access to their computer. The concept of "harm" is pretty much irrelevant to computer-crime criminal law. It would be relevant, though, if a plaintiff were to sue someone for sniffing around their computer: then you'd have to show that you were damaged.
a few quick notes that come to mind. As the commenters point out: DSGVO is indeed the German equivalent name to the GDPR (English term) "Imprint" isn't a privacy related topic that much, as such it's not really changed by the upcoming GDPR The GDPR changes many things, but the requirement for up front information isn't one of them - so it would've already been a rule to follow Sometimes the question who is responsible for privacy information might not be that easy to decide when you're on platforms. I take this situation as being pretty clear though. You are basically given a blank slate, you can do with that page whatever you want, and the visitor has no clue whatsoever that it might be hosted by Github. In addition to this, Github would be classified as a data processor (providing the tool) and you as the data controller who is in charge of practically everything except for the provision of the page. I hope this helps. Btw. it's not that hard anymore to write a privacy policy these days.
Yes Businesses (and consumers) can choose who to do business with and what information they ask for and disclose and when they do that. If you’re uncomfortable with how they do business, don’t deal with them. If they don’t like how you do business, they are free not to deal with you. This is called discrimination. However, it is not unlawful because only discrimination against a person due to membership of a protected classes is unlawful. This person “won’t answer my questions” is not discrimination based on a protected class (unless they are a monk who has taken a vow of silence).
No. Refusing to tell the address alone is not a reason to detain somebody. But there are situations where the authorities can demand that a person identifies himself or herself, including such details as the address (or lack of a permanent residency). In such a situation, failure to identify yourself can get you locked up. Also, the tone of your posting seems to question the legitimacy of the UK government and legal system as a whole. That is a box you're putting yourself into, and the company you find there is not very pleasant.
So I can block children under 13, but I can't tell them that? You can tell them after they fail, you cannot tell them on the asking screen. Then what is the correct way to block children under 13 to access my website and still comply with COPPA? I agree with you that it is odd that they recommend using a cookie but they do!* So you have a entry page with a simple question, "Please indicate your age" and then block based on the response. That's it. Note that the rule is neutral. This means that you do not need to disguise your purpose or try to trick people into entering their correct age. *I think that what is happening here is that any parent who wants to complain to their legislator can be met with the response, "If your kid is so sneaky that they are using different computers to lie about their age what do you want us to do about it?" The fact is, this scheme keeps innocent kids from seeing stuff they shouldn't; the sneaky ones are going to find a way.