Is it legal to send encrypted messages via a post card? In German law, is it legal to send an encrypted message via a post card? E.g. encrypt a message text on a computer with RSA and print the Base64 encoding on the post card and send it. Or is it a requirement that the message content is readable (hand written) plain text?
Article 10 (1) Basic Law / Art. 10 Abs. 1 Grundgesetz: The privacy of correspondence, posts, and telecommunications shall be inviolable. You can send whatever you want via postcard (as long as it doesn't constitute a different criminal offense). Technically, whoever were to decrypt your message, besides the addressee, would probably commit Data Espionage according to §202a (2) Criminal Code / § 202a Abs. 2 Strafgesetzbuch. The second paragraph states that this only applies if the data is transmitted electronically, magnetically, or otherwise in a manner which is not immediately perceptible. I would argue that a non-sealed postcard with an encrypted message would be &quot;not immediately perceptible&quot;.
Generally speaking, what isn't illegal by law is legal. It's possible for law enforcement agencies to share crime rates, maps, and their data, but within any laws regarding access and sharing of that data. Such crime data may be publicly available, but that depends on local and state laws. The local or state agency would have to enter into a legal licensing agreement - if local and state laws allow such sharing - with the GPS company to provide the data, update it, and reasonably assure that it is accurate. The more realistic reason GPS systems might choose to not show crime data may be public relations. If a GPS user lives in an area that has been objectively identified by data as having a higher than baseline crime rate, i.e. for carjackings, that user may not be very happy with that designation. Worse, what happens to public relations when data errors show an area is wrongfully identified as high crime? What kinds of lawsuits could result? Real estate agents suing since bad data from a GPS unit soured the sale of a house?
It is not legal in the case of a company. They must also accept communications by post. In the UK, &quot;a company must at all times have a registered office to which all communications and notices may be addressed.&quot; (s 86, Companies Act 2006). It must display the address of its registered office on its website, business letters, and order forms (r 25, Company, Limited Liability Partnership and Business (Names and Trading Disclosures) Regulations 2015). It must also disclose the address to you if you ask for it in writing (r 27). A failure to do either of these is a criminal offence (r 28). As a practical matter you can also look up the address yourself on the Companies House register if you know the name or registered number of the company. The company must provide you with its registered name on all forms of business correspondence (r 24) (this is a wider definition than that for disclosure of its registered office address). A company cannot rely on the fact that the registered office address it has given to Companies House is out of date. It must continue to accept communications at any address on the register for 14 days after it notifies Companies House of any change. (s 87, Companies Act 2006).
The GDPR doesn't generally distinguish public from non-public personal data. If you have a good reason to contact the professor, do send them an email. GDPR does not prevent this. If you're sending this email for “purely personal or household purposes”, then GDPR doesn't apply anyway. There are rules in the ePrivacy Directive against unsolicited emails, but these specifically relate to emails for direct marketing purposes. A company is not allowed to send out spam marketing, regardless of whether they obtained the email address from a public data source. Companies can send email marketing to their own existing customers, or to people who have given consent. Consent is defined in a fairly restrictive way (as a specific, informed, freely given, and unambiguous indication of the data subject's wishes), so that mere publication of an email address cannot be interpreted as consent to receive marketing from a particular company.
It's not illegal to ask. Whether they can give it to you, and under what circumstances, is another, much more complicated matter. For instance, if the database contains health information covered by HIPAA in the United States, or personal information covered by laws like GDPR or CCPA, the customer's ability to share the database may be restricted, either requiring additional confidentiality obligations/use restrictions, or preventing sharing entirely.
Copyright law regulates copying of protected material. In the US, there are no laws that specifically prohibit reading anything. It may be illegal to be in possession of something (classified material), but if it is legal to be in possession, it is legal to read. (Do not confuse "read" with "read aloud to an audience" a.k.a. perform, which is a separate copyright protection). It is not illegal to be in possession of material that was copied without permission.
england-and-wales northern-ireland General rule It doesn't make any difference. Section 7 of the Interpretation Act 1978 provides: Where an Act authorises or requires any document to be served by post (whether the expression “serve” or the expression “give” or “send” or any other expression is used) then, unless the contrary intention appears, the service is deemed to be effected by properly addressing, pre-paying and posting a letter containing the document and, unless the contrary is proved, to have been effected at the time at which the letter would be delivered in the ordinary course of post. Provided you meet the following elements: Properly addressing Properly pre-paying Properly posting, then you can take advantage of the above deemed delivery rule. It also makes no difference whether or not the recipient &quot;might or might not bother to open&quot; it. What matters is when it was delivered. The rebuttable presumption is that the notice is effective when it would have been &quot;delivered in the ordinary course of post&quot; (e.g. next day for first class, etc.). To rebut that, the burden of proof shifts to the recipient, who must prove (on balance of probabilities in a civil case) that it was delivered late or not at all. In practice that will be extremely difficult in the majority of cases. You might try to make an argument that &quot;letter containing the document&quot; implies an envelope. However, in my view, the ordinary meaning of the word letter means a piece of paper with some written words on it. A letter is still a letter even when it isn't inserted in an envelope. &quot;Contains the document&quot; suggests to me that the document is found within the words written on the piece of paper. Exceptions The phrase &quot;unless the contrary intention appears&quot; means that if a particular Act contains its own rules of service which contradict Section 7, then Section 7 will be overridden.
Art 13 GDPR is about information to be provided when data is collected directly from the data subject. This information can be provided directly during/before collection. It is not generally necessary or useful to send the data subject an email with this information. Usually, a SaaS website will provide the information under Art 13 as part of their privacy policy, and link it in easy to find places. Also consider the EDPB guidelines on transparency, which suggests a layered approach: in addition to a detailed privacy policy, summarize key information directly when the data is collected, e.g. next to an input form.