Where can FOIA requests be found? United States federal (e.g. FOIA) and state law allow people to request public records. The requests themselves are public record. Does any public or private entity maintain a database of those requests?
Here is an example for Washington state under RCW Ch. 42.56. First, you cannot request &quot;all public records requests&quot;, because (RCW 42.56.080) (1) A public records request must be for identifiable records. A request for all or substantially all records prepared, owned, used, or retained by an agency is not a valid request for identifiable records under this chapter, provided that a request for all records regarding a particular topic or containing a particular keyword or name shall not be considered a request for all of an agency's records. Second, there is no central agency that maintains all records – you would have to make a request of the State Patrol for all State Patrol records, the Department of Transportation for all Transportation requests, Department of Labor and Industries for their records, Ecology; Gambling; Liquor etc. There are numerous private persons willing to take your money to make records requests, but they all seem to be &quot;name-driven&quot;, that is, they get records about a specific person (pursuant to RCW 42.56.080). There is no Department of Central Records to whom you can make such a records request.
You have misread the DMLP page. In Pennsylvania, it is illegal to record a conversation if you are a party and if the other party does not consent. The fact that federal law doesn't ban something doesn't mean that states can't ban it. There is generally a presumption that when both the feds and the states can legitimately regulate something, the feds weren't trying to preempt all state laws on the topic. While people often say "federal law takes precedence over state law," the normal rule is that both laws apply; the federal law only blocks the state law if the feds wanted to block said state laws. So far as I can tell, the federal law has never been held to preempt two-party consent laws; the point of the federal law was to restrict recording, not extend it. It's like how federal law doesn't prohibit taking hostages inside the US to coerce a private company into doing what you want (anti-terrorism laws might, I guess, but the federal hostage-taking law doesn't); while the federal law excludes most hostage-taking in the US, that doesn't mean that it's legal to take hostages. Congress sometimes wants to establish nationwide standards for something, but the presumption is that they didn't.
This very much depends on where you are. Different jurisdictions have wildly different laws about this. Some places are very permissive. You can record a conversation that you aren't even a party to so long as nobody has any reasonable expectation of privacy. In others, affirmative consent is required from every party to a conversation before it's legal to record it. The laws run the entire spectrum. Some places allow you to record anything you're a party to without permission, but you can't record others' conversations. Some places require you to disclose, but not obtain explicit permission. Some allow you to record but restrict who you can disclose it to. Some allow you to record or ban recording only under certain circumstances. It's a really wide gamut of laws. Since you don't say where you are, who you're recording, or why, there's no way to really answer the question. Here's a good rundown on the United States. This Wikipedia article covers lots of different countries, but only with regard to phone calls.
Where can the patient report this infraction of the HIPAA requirements? You file a complaint with the Office for Civil Rights (OCR). If you believe that a covered entity or business associate violated your (or someone else’s) health information privacy rights or committed another violation of the Privacy, Security or Breach Notification Rules, you may file a complaint with OCR. OCR can investigate complaints against covered entities and their business associates. The U.S. Department of Health &amp; Human Services website for complaints is: http://www.hhs.gov/ocr/privacy/hipaa/complaints/. From there you can file the complaint either electronically via the OCR Complaint Portal, or on paper by mail, fax, or e-mail. The language from the Final Rule (CLIA Program and HIPAA Privacy Rule; Patients' Access to Test Reports) that describes enforcement is section V part L: Comment: Commenters asked whether a laboratory could be subject to penalties for charging more than the reasonable cost-based fee allowed by the Privacy Rule, for failing to comply with an individual's request for completed test reports within the appropriate time period, or for failing to comply with an individual's request altogether. Response: HIPAA-covered laboratories that fail to comply with the Privacy Rule's access provisions are subject to an enforcement action for noncompliance by the Department, which may include the imposition of civil money penalties. Walkthrough to file a complain through the OCR Complaint Portal (which is linked on http://www.hhs.gov/ocr/privacy/hipaa/complaints/), in the case mentioned in the question: Done!
FL 810.145 (c) - "Place and time when a person has a reasonable expectation of privacy" In Florida, there is no expectation of privacy in public. You can legally record both audio and visual anything you can see in public. As for the harassment, set up security cams and record as much of it as possible in order to provide the Police with evidence of any potential crimes.
Section 108(a) is the most useful for an infringer who posts an entire copy of a protected work in public. Subsections(b,c) require that the copy not be made available outside the premises, which precludes internet posting; (d) requires a user request to make a copy; (e) applies only to items that are off the market and transferred to a specific user; (h) allows more copying in the last 20 years of the period when a work is protected (not applicable here). Subsection (a) allows a library or archive to make one copy of a work, as long as there is no commercial advantage to making the copy, the library is relatively public (it might restrict access to bona fide researchers), and a copyright notice is included: this has the fewest restrictions on copying. The internet downloader is not a library or an archive, so the downloader is not granted any permission under 108 to make a copy. Under 108(a) a library can make no more than one copy available, but every uploading or downloading is "making a copy". A library would be contributorily liable for the illegal downloadings of their "customers". It is difficult to know exactly what one can get away with under 17 USC 107 a.k.a. "fair use". I am fairly sure that posting a copy of a contemporary book in the open is not "fair use" even if the intent is to make it possible for dummies to study chemistry: such copying is not at all transformative, totally unlimited, and provides a significant market substitute for the protected work.
The opt-out option is exercised by hanging up the phone. The federal wiretapping law 18 USC 2511 would contain any specific restrictions on recording federal employees, and there are no such restrictions. Each state has their own laws as well, so if either party is in a two-consent state such as Florida, consent from the other party would be required. The federal law only requires one party consent. It is possible that the individual expanded a separate rule that s/he may have heard of, one prohibiting recording of an IRS due process collection hearing that is conducted by telephone, as ruled in Calafati v. Commissioner. In that case, petitioner owed taxes and penalties and there was a process where the IRS was going to take his stuff, which requires a hearing. There is a federal statute 26 USC 7521 allowing the in-person hearing to be recorded, but no mention of recording telephone hearings. The Tax Court has taken the position that if it is not explicitly allowed, the IRS can forbid it: but this is in a very specific context, i.e. a specific legal hearing.
A public key is private data - the fact that its a public key is neither here nor there, its data owned by the user and not necessarily in the public domain (I have keypairs for which the public key is only known by myself, for example). For a subject access request, you must give the user all data you hold about them, subject to certain restrictions laid out in the GDPR - in your case, this would be the IP addresses, public keys, encrypted data and anything else involved in identifying their devices for transferring the files. You dont need to decrypt the encrypted data if that is something you cannot do or would not normally do in the course of holding it during a transfer - to you, the encrypted data is what you hold. If you hold the means to decrypt the data, that means (private key for example) would also be included in the subject access requests response, but in your case you say you dont hold that, so there you go. Remember to include information from things like logs etc in your response.