Legality of online publishing of public records containing home addresses of large #&#39;s of people? Suppose that: (1) a person living in Washington state receives a large number of documents from a public records request, each containing names and mailing addresses (for hundreds of thousands of people in total), along with a variety of other data; and (2) they then publish this collection of documents onto their own (non-commercial) website, and make tools to search/filter the database in various ways, selecting/displaying lists of individuals based on criteria from data about them in the records; and (3) government agencies already provide all of these documents online for free download. But they only provide the records online one-by-one rather than in aggregate, and they offer limited ability to search/filter records. Is it illegal under Washington state, or Federal, law for an individual to publish large #'s of public records containing personal information (such as home address) like this, on their own website? Would the person publishing the records likely be open to civil suits by the individuals whose information was published on the website?
Publishing government records is pretty classic First Amendment-protected activity. Keeping in mind that one can find a lawyer to sue for anything, I think that person would likely be operating well within the law. One thing in particular that I'd recommend staying aware of is how one might attempt to monetize this endeavor. There have been a lot of sites publishing arrest records, court records, and mugshots, and then charging people to have them removed to keep them from popping up in a Google search for those people's names. That is -- rightly -- regarded as sketchy behavior; while several states have passed laws prohibiting that business model, I don't believe any such law exists in Washington State at this point.
There is a good chance that the letter in question is in the public domain. Prior to 1978, the copyright laws were very different. Also, if it was published in 1963 or earlier and there was an initial claim of copyright but the copyright was not renewed, it would also be in the public domain. A convenient table summarizing when various pertinent categories of works enter the public domain can be found here. It might be possible to construe depositing the work with the Library of Congress as either a "publication" of the work (which if it happened before 1964 would put it in the public domain), or as a relinquishment of the copyright to the public domain, although I am not a specialist familiar with the legal effect of different forms of donations to the Library of Congress and it could depend upon the facts and circumstances of that particular donation to the Library of Congress. If worse came to worse, I imagine it might be possible to seek a declaratory judgment that your use was a fair use with substituted service on the heirs, and seek a default judgment, although that would not be optimal. The general problem that you face is that the work in question is what is called an "orphan work". Many other countries have special procedures to allow the use of orphan works, but the U.S. has resisted such legislation except for a narrow exception applicable only to libraries and archives at 17 U.S.C. § 108.
Can you anonymise people It is valid to anonymise the data of people, instead of deleting all of the records. The principles of data protection should apply to any information concerning an identified or identifiable natural person. Personal data which have undergone pseudonymisation, which could be attributed to a natural person by the use of additional information should be considered to be information on an identifiable natural person. To determine whether a natural person is identifiable, account should be taken of all the means reasonably likely to be used, such as singling out, either by the controller or by another person to identify the natural person directly or indirectly. To ascertain whether means are reasonably likely to be used to identify the natural person, account should be taken of all objective factors, such as the costs of and the amount of time required for identification, taking into consideration the available technology at the time of the processing and technological developments. The principles of data protection should therefore not apply to anonymous information, namely information which does not relate to an identified or identifiable natural person or to personal data rendered anonymous in such a manner that the data subject is not or no longer identifiable. This Regulation does not therefore concern the processing of such anonymous information, including for statistical or research purposes. Source As long as the person is not identifiable, then you do not need to treat the data as personal under the GDPR. You do have to inform a person once they are no longer identifiable, and be able to identify them if they provide the missing information: If the purposes for which a controller processes personal data do not or do no longer require the identification of a data subject by the controller, the controller shall not be obliged to maintain, acquire or process additional information in order to identify the data subject for the sole purpose of complying with this Regulation. Where, in cases referred to in paragraph 1 of this Article, the controller is able to demonstrate that it is not in a position to identify the data subject, the controller shall inform the data subject accordingly, if possible. In such cases, Articles 15 to 20 shall not apply except where the data subject, for the purpose of exercising his or her rights under those articles, provides additional information enabling his or her identification. Source The articles covered by this are: 15 - Right of Access 16 - Right to rectification 17 - Right to erasure 18 - Right to restrict processing 19 - Right to be informed 20 - Right to data portability
Was the case Sealed? Or is it considered to be Private? Those are two different cases. I was not able to find any laws regarding sealing, or expunging records of Name Changes, but was able to find the Utah Law for Criminal Records. I can only assume they draw from one another. All that being said, assuming your whatever case is sealed, then Some records are sealed. In these kinds of cases, even information about the existence of the case is not publicly available. A person seeking access to a sealed record must petition the court for permission to unseal the records. Rule 4-202.03 states that, ....no one may access a sealed court record except by order of the court. A judge may review a sealed record when the circumstances warrant. From that I can assume that, The records are not public. The records will not show up in a routine check The records will be known only if a there is a court order. Comparing it with the Expungement Act, Continued Use of Sealed Records After sealing, BCI continues to index and maintain all expunged records of arrests and convictions, but the records will not be released to the public. BCI will not divulge any information contained in the expunged records to any person or agency without a court order, unless authorized by statute to do so. Upon request, the following organizations may receive information contained in expunged records: the Board of Pardons and Parole Peace Officer Standards and Training federal authorities, unless prohibited by federal law the Division of Occupational and Professional Licensing and the State Office of Education Both cases above require a court order to get that seal record information. However, from what I gather only expunged criminal records can be access upon request by the Division of Occupational Licences. Bottom line, it sounds like you are safe to mark is no previous name, but you may lose your license in the future if something goes south. I will recommend you to get a professional look into the word of the law and provide you with a written statement of the actual law. Another thing you can try is write to the court who sealed your case, present them the situation and explain what you have found so far, and ask for guidance.
Yes. Art 13 requires you to provide “the identity and the contact details of the controller”. You are the data controller. Your name and address are necessary to establish your identity. Using AdSense means you're offering an internet society service commercially. In that case, there's also probably some EU fair competition directive that was implemented in your countries national law and will provide equivalent requirements. For example, my country Germany has a far-reaching Impressumspflicht. Not sure if this is the most relevant EU law, but Art 22 of Directive 2006/123 requires that your country passed laws to ensure that you make available “the name of the provider, his legal status and form, the geographic address at which he is established and details enabling him to be contacted rapidly and communicated with directly and, as the case may be, by electronic means”. I think you would be in scope of this directive since you're acting commercially. This legally mandated self-doxxing is unfortunate for private bloggers, but it's also essential for making it possible to enforce data subject rights: if you were to violate someone's privacy rights, how could they sue you if they don't know where to serve you with a lawsuit? However, all things are a balancing act. These requirements are not intended to limit freedom of expression. If you're just trying to communicate something to the public without jeopardizing your anonymity, then paradoxically social media services can be more attractive.
There is currently no law requiring a candidate for US President to release tax records to appear on the ballot. Nor is there any law requiring the President to release such records after taking office. There are laws requiring members of congress, and other Federal officials, to make public some limited information about their finances. This is much less than the information that would be included in an income tax return. Congress could pass a law requiring candidates to release their returns, but it seems unlikely that the current Congress will do so. States have broad authority over Federal elections. A state could pass a law requiring a candidate to release his or her returns as a condition of appearing on the ballot. Such a law might be challenged on Due process grounds. This would be an untested legal area, so there is no telling how a court would rule on such a challenge to such a law. Congress, or an individual house of Congress, may subpoena almost any information in pursuit of its investigation function. Investigations must be related to possible legislation, meaning it must be related to a subject about which Congress has power to pass a law. But the relation can be rather remote, as long as the information might inform the judgement of members of congress in considering a possible law. There does not have to be an actual law under consideration. Investigations have been challenged, and in a few cases there have been court rulings that an investigation was not related to possible legislation, and so Congress was not allowed to enforce subpoenas on that subject, nor to compel testimony. But such rulings have been rare. Previous Presidents have asserted, under the name of "Executive privilege", a right not to disclose information, such as internal discussions within the executive branch. This is not explicitly specified by the US Constitution, nor by any law, but has been generally accepted, and in some cases supported by court rulings. No court has ever clearly defined the extent or limits of Executive privilege. A House committee issued a subpoena this year for President Trump's tax records, or some of them. I forget whether this was addressed to the IRS or to the Treasury Dept. This has been challenged in court, and the matter is still in court. I be3live that one of the grounds asserted against the subpoena was that it was not to look into tax issues, as specified in the law authorizing the subpoena. No one yet knows how that case will proceed. The NY State Attorney General is investigating allegations that the Trump Organization, and various individuals, violated NY law, including by falsely reporting campaign expenses and contributions. In pursuit of that investigation, he issued a subpoena for various records which he claims will reveal possible evidence of those illegal actions. He pretty learly has the authority to subpoena records which might be evidence in a criminal case. This subpoena has also been challenged, but seems pretty likely to be upheld. However the subpoena was as part of a Grand Jury investigation, and Grand Jury proceedings, including evidence obtained by subpoena, are by law secret unless an indictment and trial results. So even if the subpoena is upheld, this should not lead to the public release of the records, unless someone is put on trial for some crime, and the records are evidence in that case. Even then the judge can order the records not to be released to the public.
Note: I am not familiar with Washington law, but I can make an educated guess as to what is happening here. I am guessing that the couple in question are the joint registered owners of the motor vehicle. In many jurisdictions, motor vehicles are treated differently from &quot;normal&quot; things, they are treated as inherently dangerous and thus ownership carries a certain set of responsibilities. (Similar to e.g. owning a firearm, which carries with it certain restrictions on how it can be stored, for example.) One of those responsibilities is to keep track of who is operating the motor vehicle. Therefore, unless the operator of the motor vehicle can clearly be identified without incurring unreasonable cost, tickets for traffic violations are generally addressed to the registered owner, who can then forward them to the responsible operator. (Note that &quot;unreasonable cost&quot; does not have to be monetary. It could also be an invasion of privacy: it is less invasive to just ask the owner to identify the operator than to e.g. surveil the owner's property to find out who is using the vehicle or run facial recognition against the owner's family, friends, and colleagues.) In many jurisdictions, there is a form attached to the ticket (or downloadable from some website) which will look something like this: I accept the ticket: [ ] I do not accept the ticket [ ] because … I was operating the vehicle, but I did not run the red light [ ] I was not operating the vehicle [ ] … the vehicle was operated by: name ___, address ___ … I do not know who was operating the vehicle at that time [ ] If you claim not to know who was operating the vehicle at the time in question, that might have other consequences. In some jurisdictions, you can then be ordered to keep a logbook, for example. If the vehicle then gets caught again and you again claim to now know who was operating it, or you cannot produce the logbook, you might get fined for violating the court order to keep a logbook.
It depends on whether you can identify the person to whom a username hash belongs. If you store both username and its hash in the same database row then yes. If it is impracticable for you to identify the person by their hash only, then no. This comes from the definition of personal data — "any information relating to an identified or identifiable natural person", and Recital 26: Not applicable to anonymous data. The hash is essentially anonymous data when it does not on its own allow to identify the person (with reasonable efforts i.e. without spending $$$ on detectives or forensic science).