Hacker News Reader

I imagine this policy would have to be different for those in the UK, right? I thought I had read that the Data Protection Act (of 1998) forced companies to send data in situations they would not for other countries:

https://www.gov.uk/respond-data-protection-request

> Under data protection law, anyone can ask if your organisation holds personal information about them - you must respond to their request as soon as possible, and within one month at most.

View on HN

Yes, and the whole of the EU. The Data Protection Act is in the process of being replaced with a new Act that incorporates the GDPR into UK law. The GDPR expands that right further.

Crash data is not necessarily Personally Identifiable Information

You added the word "Identifiable." The DPA isn't limited to just that.

PII is a term coined in the US

police reports of accidents are public record, you should be able to pretty easily go from crash data to personal identity based on public records. Sounds like PII to me.

Reply on news.ycombinator.com