UK - can you run a criminal records check on a customer? Had an interesting conversation with a friend who runs a labour agency which sends people to businesses for temp jobs. I asked her whether she conducted criminal records checks of the directors of the SMEs she sends labour to. She said no, and that she didn't know whether that would be legal. Which is an interesting question. How does she know that the person who runs the pub she's sending agency labour to isn't a murderer? Can you do a CRB check on a prospective customer? My thinking is not, but this seems like an exceptional situation.
No, you cannot DBS (formerly CRB) check a customer DBS checks can only be carried out within an employment or volunteering context, provided specific conditions (such as the profession, work, or type of job) are met. It is not possible to lawfully conduct a DBS check on a customer or supplier, for example - because they are not an employee or a volunteer for your organisation. It is possible for members of the public to request a DBS Basic check for themselves (this will reveal current active convictions), but not for other people. The other DBS checks are only available to organisations with specific hiring needs as mentioned above. DBS checks are regulated by the Rehabilitation of Offenders Act 1974 and the associated Exceptions Order 1975. A DBS Basic check will reveal active, &quot;unspent&quot; convictions. A &quot;spent&quot; conviction is simply one that no longer shows up on a DBS Basic check. A DBS Enhanced check will reveal all convictions (active and &quot;spent&quot;) plus relevant information from police forces depending on the nature of the proposed employment. Most occupations that work with children or vulnerable adults in some capacity (e.g. lawyer, teacher, nurse, care home worker, school janitor, etc.) will be eligible for a DBS Enhanced check. All other jobs will only be eligible for a DBS Basic check. There is no legal way for you to find out if a prospective customer or supplier, etc. has a criminal record in the UK.
The CEO wants to "fool" users You are essentially admitting that the company you are working for is about to deceit its customers and asking whether that is legal. The relevant set of laws is rather sparse and does not give direct answers in regards to oAuth tokens or other details of that level (which is probably making your CEO think he can "handle" the arising questions). Probably the most relevant bit of legislation that applies here is The Federal Trade Commission Act (15 U.S.C. §§41-58) which prohibits unfair or deceptive practices and has been applied to online privacy and data security policies. I am pretty sure that, in practice, if the users take your company to court, it will be held liable because: users are allowing us to read their CRM data and once we get the data, the data become ours, and we can do whatever we want with it. Is this true? While the users are still allowing you to read their data it is completely up to the Terms/EULA what you can do with it. However, once you have made the users think that they have withdrawn your access (e.g. they "deleted" oAuth tokens), you are no longer authorized to read the current data (although the Terms may still allow you to use the old data you obtained when you had access). Silently continuing to access their data without their knowledge/approval is definitely a deceit. The CEO wants us to download all of their emails and store them in our database There would be nothing wrong with that if it was in the Terms. But if it is not, that would be a blatant (and easily punishable) breach of privacy. Note that you may also be held personally liable for this wrongdoing (if/when proved so). "Just doing your job" claim will not work.
You did not mention the country where you are, but this sounds like a very bad idea. Any working &quot;glitter bomb&quot; will be a low-grade bomb and setting one of those is extremely illegal. If you know when the next parcel will arrive, my advice would be to arrange for a credlible witness and to take pictures of the parcel before you open it any further. Then report the damage to the sender. If it was a commercial parcel, ask for a full refund. Enough of that and the postal inspectors will wonder why their machines are &quot;damaging&quot; so much mail.
While German law indeed requires providing correct contact information it does not require the recipient to answer queries. It is there so that you can submit legal notifications. In your case I wouldn't be so sure that the information is not correct. However, even if the contact information is incorrect, there is not much you can do about it. This is reserved to the following groups by § 8 Abs. 3 UWG: every competitor; associations with legal personality which exist for the promotion of commercial or of independent professional interests, so far as a considerable number of entrepreneurs belong thereto, and which distribute goods or services of the same or similar type on the same market, provided such associations are actually in a position, particularly in terms of their personnel, material and financial resources, to pursue the tasks, under their memoranda of association, of promoting commercial or independent professional interests, and so far as the contravention affects the interests of their members; qualified entities that prove that they are entered on the list of qualified entities pursuant to section 4 of the Injunctions Act or on the list of the Commission of the European Communities pursuant to Article 4 of Directive 98/27/EC of the European Parliament and of the Council of 19 May 1998 on injunctions for the protection of consumer interests (OJ Number L 166 page 51); Chambers of Industry and Commerce or Craft Chambers. Unless you are a competitor you are out of luck. The hoster or other providers can't do anything and don't need to, as they are not required to check legality of their user's websites. It doesn't really matter where you are by the way for these laws.
Was the case Sealed? Or is it considered to be Private? Those are two different cases. I was not able to find any laws regarding sealing, or expunging records of Name Changes, but was able to find the Utah Law for Criminal Records. I can only assume they draw from one another. All that being said, assuming your whatever case is sealed, then Some records are sealed. In these kinds of cases, even information about the existence of the case is not publicly available. A person seeking access to a sealed record must petition the court for permission to unseal the records. Rule 4-202.03 states that, ....no one may access a sealed court record except by order of the court. A judge may review a sealed record when the circumstances warrant. From that I can assume that, The records are not public. The records will not show up in a routine check The records will be known only if a there is a court order. Comparing it with the Expungement Act, Continued Use of Sealed Records After sealing, BCI continues to index and maintain all expunged records of arrests and convictions, but the records will not be released to the public. BCI will not divulge any information contained in the expunged records to any person or agency without a court order, unless authorized by statute to do so. Upon request, the following organizations may receive information contained in expunged records: the Board of Pardons and Parole Peace Officer Standards and Training federal authorities, unless prohibited by federal law the Division of Occupational and Professional Licensing and the State Office of Education Both cases above require a court order to get that seal record information. However, from what I gather only expunged criminal records can be access upon request by the Division of Occupational Licences. Bottom line, it sounds like you are safe to mark is no previous name, but you may lose your license in the future if something goes south. I will recommend you to get a professional look into the word of the law and provide you with a written statement of the actual law. Another thing you can try is write to the court who sealed your case, present them the situation and explain what you have found so far, and ask for guidance.
This is weird. Within the EU, a passport is proof of identity, and it is also proof that you are allowed to take a job in the EU. There is nothing that a birth certificate would add to this. Either the bar manager is badly misinformed, or he doesn't want to give your brother a job, and will come up with something even more ridiculous if he gets the birth certificate.
I'm based in England, but I'm sure the principle is similar in Canada. The night club or concert venue is private property. When someone owns or rents private property one of the main things they are buying is the right to control who is present on that property, and generally they can use reasonable force to remove people who are not authorised. Security guards generally act as agents for a property owner, tenant or similar.
GDPR is not a blanket ban on the handling of personal data. It is a set of guidelines when and how data may be processed and stored. Documenting the compliance with a deletion request is one of many purposes for which some data may be retained after a deletion request. Others would be past contractual obligations, legal documentation requirements, and even a balance of 'legitimate interests' of the processors and the data subjects. The processor might be able to argue that fraud/abuse prevention is such a legitimate interest. What if I want to create a service that does let users enter their friends' email addresses, and send those friends an email invitation to the service? Get a specialist lawyer on staff who can check your exact business processes. A web site like this cannot possibly give you a full explanation of the pitfalls.