Legality of mass email situation I am launching a business directed towards college campuses. I know the email address format of the first college I will be launching at is firstname.lastname@college.edu . Basically, I would not have these emails because people signed up to hear from me, I would be taking a list of possible first names and last names and combining them in the email format of ifrstname.lastname@college.edu and sending out an email to all, whichever emails happen to actually exist the message would be delivered to. Is this illegal in anyway? I do not know much about spam or the legality of it so I apologize if this seems like a rookie question.
I assume based on your reference to .edu and your can-spam-act-of-2003 tag that you are interested in United States law. The scheme you describe is illegal under the CAN-SPAM Act. 15 USC 7704 (b) (1) (a) (ii) (b) Aggravated violations relating to commercial electronic mail (1) Address harvesting and dictionary attacks (A) In general It is unlawful for any person to initiate the transmission, to a protected computer, of a commercial electronic mail message that is unlawful under subsection (a), or to assist in the origination of such message through the provision or selection of addresses to which the message will be transmitted, if such person had actual knowledge, or knowledge fairly implied on the basis of objective circumstances, that— (i) the electronic mail address of the recipient was obtained using an automated means from an Internet website or proprietary online service operated by another person, and such website or online service included, at the time the address was obtained, a notice stating that the operator of such website or online service will not give, sell, or otherwise transfer addresses maintained by such website or online service to any other party for the purposes of initiating, or enabling others to initiate, electronic mail messages; or (ii) the electronic mail address of the recipient was obtained using an automated means that generates possible electronic mail addresses by combining names, letters, or numbers into numerous permutations. The last part (ii) specifically forbids what you propose (&quot;combining names... into various permutations). Under 15 USC 7706 you may be liable for statutory damages of up to $250 per email. In addition to being illegal, I suspect your plan will also be ineffective: this sort of spam attack would be really easy for the university to detect and block.
First of all, a contract is valid without a signature and even without being in writing; all that is needed is consent by the parties. Therefore, the signature is merely evidence of that consent and is only relevant if a dispute arises over the general consent or the particular terms that were consented to. A digital signature would make it harder for Bob to argue that those were not the terms he signed but if I have Bob's signature on them then the onus of proving he didn't sign rests with Bob, I don't have to prove he did. All of the methods you suggest are valid as would an email saying "Got the contract. I agree. Bob."
You're misreading the law. You need to keep reading the section you referenced (emphasis added): The disclosure...shall be made in writing and delivered through the consumer’s account with the business, if the consumer maintains an account with the business, or by mail or electronically at the consumer’s option if the consumer does not maintain an account with the business Thus, the option to have the disclosure sent by mail only applies to consumers who do not have an account with the business. Since presumably a large number of sites only maintain personal information for users with accounts, such sites need not provide a mail option. Further, it doesn't say there needs to be a button: you just need the ability to say you'd like it mailed to you in the request somehow, and then they need to comply when you do.
Much of your ability to sue the email company for damages depends on local and Estonian laws, but the most important aspect is the TOS and user agreement you agreed to when you originally signed up for the service. Read it (though if the portal is now off-line, it may not be accessible). You may have agreed to hold the company not liable for any damages from loss or stolen data, and you may have also agreed to arbitration and to not pursue them in court. It all depends on what is (was) in that agreement, so find a copy of it; though it's possible that some local or Estonian laws may supersede any contractual agreement with the company. And FYI, the email you received concerning the video and demanding payment in Bitcoin is a common scam right now, and the threat may indeed be meaningless.
According to my knowledge I am not allowed to share other people's full name nor phone number nor email address without their permission. That is not correct. According to GDPR Article 2: This Regulation applies to the processing of personal data wholly or partly by automated means and to the processing other than by automated means of personal data which form part of a filing system or are intended to form part of a filing system. This Regulation does not apply to the processing of personal data ... ... (c) by a natural person in the course of a purely personal or household activity; GDPR Recital 18 states in relevant part: (2) Personal or household activities could include correspondence and the holding of addresses, or social networking and online activity undertaken within the context of such activities. Personal data that is not processed by &quot;automated means&quot;, for example data which is transmitted verbally, by hand writing, or by manually sent email, is not covered by the GDPR. Data which is used by a natural person for &quot;personal activities&quot; is also not covered. Consulting one's personal lawyer might well be a personal activity unless it is a business matter. Even if such a transfer of data were in scope for the GDPR, consent of the data subject (DS) is not the only available lawful basis. GDPR article 6 permits any of several possible lawful bases to be used, particularly paragraph 1 point (f) which reads: (f) processing is necessary for the purposes of the legitimate interests pursued by the controller or by a third party, except where such interests are overridden by the interests or fundamental rights and freedoms of the data subject which require protection of personal data, in particular where the data subject is a child. Also possibly relevant is point (c) which reads: processing is necessary for compliance with a legal obligation to which the controller is subject; In short, providing one's personal lawyer with the names and addresses of relevant people in connection with a legal issue is not at all likely to be prohibited by the GDPR, nor to require the consent of the people whose names and contact info are provided. However, a comment by user PMF reads: The Data Protection laws are mostly for companies, not for individuals. This is an overstatement. The laws do apply to natural persons as DCs, although enforcement is largely targeted at businesses, particularly large, for-profit businesses.
it would violate law? It would be very dependent of what your jurisdiction is and what the software does. I would expect most software that would be lawful to install at your home would be lawful to install at your company, but there may be exceptions. To put an hyperbolic example, if you work at the CIA and you install some remote access software that allows you to access your workstation from a non-secure PC through non-secure methods, I am pretty sure that would be illegal, even if you had the best of intentions. A recent scenario taken from real life involves some members an organization who are required to use official e-mail servers for FOIA purposes setting up their own private mail servers. Of course, YMMV. can I purchase it for myself, and then use at workplace Even if the software is legal it does not mean that it is ok to use it at the workplace. Most business have rules about what software may be installed in the PCs, who may install it and how to manage it. Your software could introduce security vulnerabilities that your IT team may need to be aware of, or incompatibilities with other software. It may introduce legal liabilities (you install a "home edition" licence in a corporate environment where that licence is invalid). Your company may discipline you if you breaking those guidelines and install software without authorization, even if there is no harm for them for this action. On top of that, if your actions cause some damage to the company, it can sue you to get you to pay for those damages. Before taking any action you should inquiry about your company's IT policy and, if your company does not have one or if the policy is not clear about allowing you to install the software, ask the people in charge (preferably in writting).
If you are Donald Trump posting under an assumed name then it is illegal, because he is currently president of the USA and not supposed to run any businesses. If you are not Donald Trump, then be aware that Donald Trump owns a trademark for "Donald Trump" according to this site https://onlinetrademarkattorneys.com/donald-trump-trademarks/ so you will be infringing on his trademark.
An email would be enough. As would an SMS. “Designated in writing” is pretty straightforward.