Why do passport applications ask for the information they ask for? In the U.S., the passport application asks for: A contact and their information Intended destination for the first use of the passport Details about one's parents Why is this information part of the passport application? (In my opinion, these questions leave the applicant open to being put in touch with people they'd rather not be in touch with or having the parents learn about the applicant's travel plans.)
You have the right to withhold this information; they have the right to withhold a passport. You do not have a right to a passport; it is a privilege and that privilege may be withdrawn at the discretion of the State Department for all sorts of reasons. As a US citizen you have a right to travel within the US; you don't need any papers for this. However, if you wish to cross an international border then both the country you are departing and the country you are arriving in will decide the circumstances under which you can.
According to The official government page &quot;Freedom of information (FOI)&quot; FOI only applies to FOI bodies. These are mostly bodies that are publicly funded (for example, government departments). If you want to apply for records that are held about you by a private organisation, you can apply under data protection laws. FOI allows the public to have information about what the Government is doing and it is often used by journalists, campaigners and opposition parties. ... Organisations that are covered by FOI FOI laws apply to public bodies unless they are exempt. FOI bodies include: Government departments Bodies that were set up by an Act of the Oireachtas (for example, the Consumer and Competition Authority was set up by the Consumer and Competition Protection Act 2014), or established by a Minister or the Government A company where the majority of the shares are held by or on behalf of a Minister of the Government, or any of its subsidiaries A higher education institute that is publicly funded Some non-public bodies that get a lot of public funding Unless the company you are dealing with is an &quot;FOI Body&quot; it seems that the Irish FOI will not apply. The official Irish Government page on &quot;How to access your personal data under the GDPR&quot; states: Make your request in writing Ask as soon as possible and in writing. This can either be by letter or email. Seeking your personal data is known as making an access request or a data subject access request. You should state in the letter or email that it is an access request. This means that both you and the data controller will have a record of the request and its content if an issue later arises. Some large companies allow you to automatically download your personal information directly through their website. Contact the relevant data protection officer Many large organisations have a Data Protection Officer (or DPO) and they are generally the best person to contact about your request for information. You should be able to find their contact details in the privacy policy or ‘contact us’ section of the organisation’s website. Where there is no specific email address for a data access request, you should use the organisation’s general contact details. ... How will the company or organisation deal with my request? The data controller must respond to your request within one month. However, if you complain to the Data Protection Commission, the organisation may be given some extra time if it missed the deadline as a result of COVID-19. If the request is complex or involves a large amount of information, the data controller can extend the time to respond by a further two months. You should receive a written explanation for any extension within the initial one-month period. If your request is very broad and requires the data controller to provide a large amount of information and documents, you may be asked to reduce the number of documents containing personal data requested. However, you can insist on receiving all the information and documentation held. If you do, it may take longer to comply with your access request. In general, the data controller should respond to your access request in the same format the request was made, or in the way in which you specifically asked for a response. For example, if you emailed your request, the data controller should provide the information by email, unless you request otherwise. ... What can I do if I am unhappy with the outcome of an access request? If you are unhappy with the way your access request was processed, you can make a complaint to the Data Protection Commission (DPC)](https://www.dataprotection.ie/). The DPC is Ireland’s independent authority with responsibility for upholding the right of people in the EU to have their personal data protected. It monitors compliance with GDPR and other data protection legislation and deals with complaints in relation to data protection breaches. The DPC website contains helpful explanations of data protection law. You may be unhappy with the way your request was handled because: There was no response or a delayed response to your access request The response to the request was incomplete You believe the data controller wrongly relied on exemptions to not share your personal data with you How do I make a complaint? Complete the DPC’s online complaint form. You will be asked to provide evidence to support your complaint. This includes: Evidence of your access request Correspondence between you (or your legal representative) and the data controller and information in support of your belief that the data controller holds your personal Information The GDPR provides the right of access to one's personal information under Article 15, but leaves the details of times for response and handling of complaints to the national data protection authority and to national law. In the case of Ireland this is the Irish DPC. The GDPR dos not provide a right of private action (that is the right to bring an individual lawsuit) to enforce its data access provisions.That can only be done through a complaint to a national data protection authority.
The answer is &quot;it depends,&quot; of course. An asylum application may be considered less credible if the applicant entered as a tourist. The applicant would have to explain what changed between the time of entry and the time of the asylum application. (Perhaps a change of government at home? The start of a civil war?) Many countries expect applications for a work permit to be made from outside. Such an application may take much longer to process than a tourist visa, which makes the stay as a tourist problematic. On the other hand, there are countries which allow some tourists to file immigration applications. For instance, Canadian citizens and some others can apply for a German residence permit while they are in Germany.
The privacy rule is spelled out here. Subpart D addresses disclosure of personally identifiable information from education records, saying when consent is required vs. not required (there being 16 conditions under which consent is not required). Mostly this refers to &quot;required by law&quot; exceptions, or &quot;for school-internal use&quot;, but also includes &quot;directory information&quot;. Information may be disclosed if the student (as an adult) or a parent (of a minor) has consented to disclosure. Under the legal definition of &quot;record&quot;, that simply means &quot;tangible information&quot; (not &quot;conversations&quot;). An education record is one that is &quot;directly related to a student; and maintained by an educational agency or institution or by a party acting for the agency or institution&quot;, possibly including the information that you cite – providing that the information is maintained and disclosed by the school. In addition, though, certain information can be freely disclosed, namely &quot;directory information&quot; which is: Directory information includes, but is not limited to, the student's name; address; telephone listing; electronic mail address; photograph; date and place of birth; major field of study; grade level; enrollment status (e.g., undergraduate or graduate, full-time or part-time); dates of attendance; participation in officially recognized activities and sports; weight and height of members of athletic teams; degrees, honors, and awards received; and the most recent educational agency or institution attended. The regulation explains that this is information that &quot;would not generally be considered harmful or an invasion of privacy if disclosed&quot;. Privacy standards have changed since the law was passed – but it is allowed by the existing law.
Does this mean that anyone who is born in the US is automatically a US citizen, whether they want it or not? Yes (subject to a couple of exceptions, namely the children of diplomats with full immunity and the children of a hostile foreign occupier). Or does this amendment just offer the possibility of requesting citizenship? In other words: is there an action to be made in order to become a US citizen when born in the US (and therefore one is not before this action is performed)? No. For someone who falls under the 14th amendment's citizenship clause, the only way to avoid being a US citizen is to relinquish or renounce it, which generally means that one is stuck with the US citizenship for at least 18 years. Most countries' citizenship laws, or at least all of those with which I am familiar, operate this way—automatically—for "normal" cases of acquisition of citizenship by virtue of the circumstances of birth. This is true whether the citizenship derives from the place of birth or from the parents' citizenship.
Verifying the identity of the person making an SAR is a requirement (for fairly obvious reasons) but there's no specified way this is to be done. As the ICO puts it: If you’re not sure the requester is who they say they are, you must check this quickly. You shouldn’t ask for formal ID unless it’s necessary and proportionate. Instead, you could ask questions that only they would know, about reference numbers or appointment details for example. Or you can ask for ID that you can actually verify. There’s little point insisting on photo ID if you don’t know what the requester looks like – it should be proportionate. The key word to take account of here is &quot;proportionate&quot; - and this is going to hinge on not just the data the SAR is asking for but the type of data that the Data Controller/Processor is handling. A police force is likely to be storing far more sensitive data about the data subject than e.g. a retailer and you'd expect a more robust identification process. The fact that the law doesn't specify ID requirements is what will lead to different organisations having different requirements - they've ultimately had a large amount of leeway in determining what is appropriate themselves, and that leads naturally to variation. In general terms (rather than specifically for SARs) requiring two forms of ID is not uncommon, it does after all increase the security of the process. Pick-pocketing someone's wallet will often get you their driver's license but it will rarely get their wallet and their recent utility bill. Successfully intercepting a utility bill won't get you their driver's license. It's not perfect but it raises the difficulty of circumventing the check. Are there rules on what requirements may be deemed unlawfully or excessively onerous as preconditions for complying with a SAR? If Bob feels the ID requirements are too extreme they can complain to the ICO and if they agree they can &quot;advise&quot; the data controller to ease up on the requirements and if this fails to reach a satisfactory outcome Bob ca take legal action - but I doubt the examples given would raise any concern. Even the two-forms level is only on a par with the requirements many agencies have for renting a car. why do they need your address (and what if you are a vagabond/nomad with NFA?) In addition to the ID-aspects having your address may be necessary in terms of communicating with you regarding the SAR. If you're someone of no fixed address this requirement may provide difficulties of course - but SARs are by no means unique in this regard. Talking to the data controller and seeing if they would be willing to accept either an alternative second form of ID or waiving the requirement altogether would be the logical first step in such circumstances.
From a German perspective, it would be absolutely normal and expected that you're providing identity &amp; contact information publicly. Per §5 TMG (Impressumspflicht / Anbieterkennzeichnung) this is required for German tele-media offerings, such as websites or email providers, even if non-commercial. Whereas for you as an upstanding and diligent email provider an abuse@... address should be enough, the German context expects a street address where you could be served with a lawsuit… There absolutely are privacy and free speech issues with this compelled self-doxxing. But by running an email service, you're not just acting as a private person. Your privacy interests and the transparency and security interests of other people have to be balanced. Now since you are not in Germany, the TMG does not apply to you. You have no legal obligation to provide this information. However, the ISP also has no legal obligation to to deliver your email. The ISP does have an obligation to apply appropriate organizational and technical safety measures. It seems that one organizational measure they have found appropriate is that they will only deliver emails from providers that provide public contact information, as would be the norm in Germany. I am not entirely sure how the GDPR applies here. The GDPR doesn't really allow or prohibit disclosures of personal data, it just requires that every purpose of processing for personal data has a legal bases per GDPR Art 6. One such legal basis is a legitimate interest, which boils down to a balancing test between your rights and freedoms and other people's interests. I'm also not sure if the contact information should be classified as personal data in this context, because the contact info primarily relates to your role as an email provider. I'm also not sure if the ISP is processing your personal data in the sense of the GDPR when they merely require you to publish it on your own site. They would be processing it as soon as they scrape, store, or otherwise use this info.
When you refer to customs, that necessarily denotes travel to a foreign county, such that each county will have their own laws, rules, and regulations that govern these issues. It is more than likely that if you refuse to answer the questions of customs officials in ANY country, you will be denied admittance. The same is true if you refuse or balk at being searched (personally or your possessions), and keep in mind that this is without reasonable suspicion or probable cause. The best thing to do is to answer the questions honestly and accurately, but also as narrowly as possible to completely answer. Trying to argue with them will only send up red flags and you will be there longer. Remember it is a privilege, not a right, to enter a sovereign nation of which you are not a citizen. For example, in the U.S., customs reserves the right to detain for questioning, search you, your car, your children, your bags, packages, purse/wallet, or any other travel item with full legal authority to do sol they can even examine your electronics (content and hardware). You place your stuff on the exam station and open it. (After the exam is completed, you will be asked to repack and close the baggage.) If you are unhappy with the way you are being treated, you do have the right to ask to speak to a CBP supervisor, but I cannot see anything good coming of it, unless they were super rude without provocation or broke something of value. The authority to delay and speak with travelers derives from the United States Code (section citations below) enables CBP to prevent the entry of persons who are inadmissible under the Immigration and Nationality Act, and to prevent the smuggling of merchandise, including narcotics and other contraband items, into the United States. Speaking with travelers and examining merchandise coming into or leaving the United States is just one of the mechanisms used to identify illegal or prohibited items, and to determine whether or not someone is trying to enter the U.S. for unlawful or fraudulent purposes. Unless exempt by diplomatic status, all travelers entering the United States, including U.S. citizens, are subjected to routine Customs examinations. At times, people make the mistake of thinking their civil rights are being violated by being asked questions about their trip, personal background and history, etc. That is not the case. Supreme Court decisions have upheld the doctrine that CBP's search authority is unique and does not violate the fourth amendment's protection against unreasonable searches and seizures. U.S. Customs website has a detailed Q&amp;A section. Most modern countries do as well.