Giving a fake name in a government contact form: illegal or no? Say I want to contact a government agency from the U.S. This agency can be in any country/territory/state or province. For example, I want to contact the Nova Scotia government regarding zoning laws and etc. for a property I am building. In the contact form I put a fake name or send an email from an account that gives a fake name. I am contacting a government agency. Is this illegal if I just use a fake name to inquire info about something? Nothing illegal or shifty -- just for an email/question, and no further actions are taken beyond this (for example, I may ask a question but won't show up at city hall and give fake info).
It depends on the context, who are contacting, and what you agree to when submitting. For example, lying the the federal government of the United States is generally a crime. See https://en.wikipedia.org/wiki/Making_false_statements Similarly, if you submit information under penalty of perjury you may be violating a law prohibiting lies under oath. See https://en.wikipedia.org/wiki/Perjury
My interpretation of the GDPR when it comes to a contact form is as long as your privacy notice states that what data you collect in the contact form and what legal basis that data is used for you are fine. Someone submitting a contact form in my opinion is their consent to reply back to them regarding the data in which they have submitted. Another good clause to have in your privacy policy is to basically state if the user submits information about another natural person that they have consent from that natural person for that data and what it would be used for. The internet is the internet. People have been trolling it for years. People have also submitted false information for years. The best a business can do is simply outline what their site does, what data is collected and what it will be used for. That along with what legal basis it’s processed for and following it makes you GDPR compliant in that regard. As to withdrawing consent and the rights given by the GDPR that’s all specific to what infustructure a business has in place. As a developer I know the headaches of the GDPR. Most of it resides in the fact data is not centralized and thus can’t easily be retrieved, modified, or removed. Once you’ve tackled that aspect providing the user their rights under GDPR isn’t to far off.
No, in germany there is no universal requirement as to form (Formfreiheit). This includes associating a signature with a name in block letters. In principle you can enforce a contract in court even if the written contract does not identify the contracting parties by spelled out name, but by signature only. It stands to reason there is no benefit in omitting the full names. The legislature implemented elevated form requirements for certain legal transactions by mandating the use of a notary. Here, again, there is no requirement as to put a plain text name next to your signature. The link between signature and person is established via the notary’s documentation. You could put an alias “Donald Duck” next to your signature, the notarial deed will indicate that in fact Kalle Richter signed the document. As far as I am aware all european-union legal transactions will need to go through their official channels. It is simply not possible, for example, to establish a European Economic Interest Grouping on a scrap of paper. Thus there is no issue and in turn no regulation. One thing is for sure, the european-union does not impose a “minimum framework” on its member states. I recollect there are some directives regarding electronic signatures, but that is a different story now.
How come this is viable? Because it’s legal. What if people use their service to commit crimes? What if people use a Ford in a bank holdup? Or a Glock in a murder? Or the US Postal Service in a Nigerian letter scam? If the goods or services are legal and not provided for an obviously illegal purpose, nothing happens.
There are various tangential ways in which this could be illegal, for example if your subjects are celebrities, you take a picture of them and commercially exploit it without permission in a product endorsement. Leaving aside such fringe cases, in the US, the legal right to privacy comes about, at the first cut, by premise trespass law. If the proprietor tells you to go away, you have to go away; if the proprietor tells you that you cannot take pictures, you cannot take pictures (your right to enter is conditional). Neither of those circumstances holds in your case. There are other tort-law bases for a right to privacy: numerous privacy laws regarding privacy and financial transactions (not relevant here), the aforementioned right of publicity (commercial exploitation of likeness), false light (like defamation, about creating a false impression – I don't see what false information is conveyed by a photo). There is also public disclosure of private fact, but that cat is out of the bag because the subject has self-disclosed the supposedly offensive fact revealed by the picture by eating in public. Intrusion of solitude and seclusion does not exist in the circumstance, since the subject is eating in public where everybody can see: there is no reasonable expectation of privacy. This page sums us Virginia law. The main take-away from that is that there is no common law action for privacy in Virginia, and only an action for unauthorized used of likeness or name.
Per Art 12(6), they are allowed to ask for additional identify verification: where the controller has reasonable doubts concerning the identity of the natural person making the request referred to in Articles 15 to 21, the controller may request the provision of additional information necessary to confirm the identity of the data subject. Additionally, Recital 64: The controller should use all reasonable measures to verify the identity of a data subject who requests access, in particular in the context of online services and online identifiers. A controller should not retain personal data for the sole purpose of being able to react to potential requests. There is no consensus regarding what this means in practice: Must the controller use all measures that they can be reasonably be required to use? Or only those measures to verify the identity to a reasonable level of certainty? I agree with you that asking for a passport is excessive, and that email verification would be sufficient. However, that is just my personal opinion. The GDPR can also be interpreted in a way that asking for a copy of your passport is OK. Where they process a copy of your passport, that is personal data as well. You also have data subject rights with regards to this processing, for example the right to be informed of the purpose of this processing and of when the data will be deleted. If it is only used for the purpose of verifying your identity, the copy of your passport should be deleted immediately afterwards. The data controller may have additional obligations because a passport or ID card is a very sensitive document. E.g. Art 87 allows member states to impose additional rules. Most sensible controllers will therefore want to avoid processing passports, unless they only operate in specific EU member states.
The short answer is that there are many different ways that different countries regulate lawyers, and thus, many different ways to go about confirming the legitimacy of a lawyer. There is also considerable variation by country and by the type of legal situation involved, regarding the effect of a good faith reliance on inaccurate advice from a lawyer. The fact that there is so much variation in this is one of the reasons that fraud and corruption in international transactions involving people who are, or who claim to be, lawyers is fairly common. My office gets dubious communications involving people who claim to be lawyers (sometimes hijacking the names, photos, and trade dress of legitimate law firms and lawyers with subtly spoofed contact information) several times a week. One option is to proactively seek out firms using recognized and well-established legal directories with multinational operations and ratings of each lawyer's competence and ethics, rather than responding to cold call style advertising or online commentary and essays. Historically, the leading publication in this niche was Martindale Hubbell, but there are now multiple competitors that use this business model. Another option is to rely on word of mouth referrals and/or corroboration from people in a good position to know, such as embassy staff from your country in the country in question, or from professional employees of large multinational businesses in the country in question. Ideally, rely on more than one source for each law firm you consider retaining.
No. Refusing to tell the address alone is not a reason to detain somebody. But there are situations where the authorities can demand that a person identifies himself or herself, including such details as the address (or lack of a permanent residency). In such a situation, failure to identify yourself can get you locked up. Also, the tone of your posting seems to question the legitimacy of the UK government and legal system as a whole. That is a box you're putting yourself into, and the company you find there is not very pleasant.