My location is Victoria, Australia, but the company that I'm talking about in this post is American, based in New York City.

​

Does anyone know what laws/rights concern the acquisition, storage, and release of user data, and how that applies to the person' who the data is about?

Specifically, a company has added my business email address to their mailing list. I have never had contact with them before, nor have I subscribed to any mailing list (with that email). I want to know where they got it from, as I don't use this email address for anything except business related endeavours, and I want to know who to stop doing business with if they're selling my information (and also get that information removed from the mailing list the client's databases).

I'm almost certain that if I ask how they acquired my info, they have to disclose, and if I ask for the removal of data they must do it in a timely fashion, but I could be wrong.

Cheers!