GDPR explained: How the new data protection act could change your life

[@TecraX2]

"WE VALUE YOUR PRIVACY" is reason why we blur-out the article/information of the link you just clicked on and instead display a pop-up notice offering the following "choices"; Most prominently is one gigantic brightly colored button labeled "AGREE TO ALL" which will instantaneously take you to the content you were looking for. If you somehow managed to find a magnifying glass, you MIGHT also be able to find an option to "MANAGE..." that will show you a list of names of approximately 5000 COMPANIES that you never even heard of before. Even though you just specifically clicked on the button NOT labeled "AGREE TO ALL", we will still assume that you want us to share your information with all these different companies, which is why we will require you to DESELECT each and everyone one INDIVIDUALLY... What better way could there possibly be to show someone that "WE VALUE YOUR PRIVACY"?!? - "Incognito Mode: Not just for Hentai Porn anymore!!!"

[@yeahmem]

In the US this kind of legislation would unimaginable, and probably will be for the next 10 years.

[@HikenShtiken]

the video was really helpful but I was too distracted by the girls eyes reading the material next to the camera

[@MedEighty]

That's a woman, not a girl.

[@cassiusspacetrain2852]

hmmm... JOTD

[@yamapinokanojo]

I thought I was the only one.

[@vampy8112]

Haha same, near the end i definitely noticed she was reading from a board or something

[@saraholiveedwards4697]

me too

[@commandbaker3334]

Why do companies track your heartbeat? I would imagine that when they detect no heartbeat, they send ads to loved ones for coffins or something like that.

[@VictoriaSobocki]

Oof

[@JanisOteps]

Someone needs to learn what countries are in EU. Cmon channel 4

[@younotme1617]

MAKES NO DIFFERENCE If they overlap into the eu they have to comply ! But the law has loop holes

[@brahnseer3512]

What about cookies? They are not as innocent as they pretend. They get access to your computer by your consent, but do not say exactly what they store on your computer. Often they prevent you using their web site unless cookies are enabled. There is definitely something untoward going on.

[@cassiusspacetrain2852]

just be aware

[@andrewmiller3228]

??? I'm pretty sure we are not in a capsule living as a battery. It does feel like we are living in the matrix though.

[@VictoriaSobocki]

@@cassiusspacetrain2852?

[@sophiesmith5922]

so....cookies may include an id for advertising. That id refers to the link that allowed you to find content you visited. It may allow a website to show one type of page to a first time user, a different one to a return visitor. Usually they are associated with affiliate links so publishers can get commission from advertisers. They only scan your pc for that cookie and its expiry date when making a purchase or revisiting a page. But expired cookies are still cookies, taking up pc space, so regularly clearing your browser cache can really help with performance. The main issue comes with ads or sites that abuse the use of cookies to spam you later

[@ICTIPlaw]

What Are Cookies? Cookies are small text files stored on your computer by websites you visit. They are used to enhance your browsing experience, such as keeping you logged in or remembering your preferences. However, not all cookies are as innocent as they seem. Types of Cookies Necessary Cookies: Enable basic functionality like login and navigation. Functional Cookies: Remember preferences, like language selection. Analytics Cookies: Track your behavior for website performance. Advertising Cookies: Profile you to target ads based on your browsing. Concerns Transparency Issues: Websites often don't clearly state what data cookies collect or how it’s used. Consent Dilemma: Some websites force you to enable cookies, giving you no real choice. Data Exploitation: Some cookies track you across websites, creating detailed profiles that advertisers use to target you. Lack of Control: It's challenging to manage cookies and know what data has been stored on your device. Legal Framework In Kenya, The Data Protection Act, 2019 applies to cookies since they process personal data. Websites must: Clearly disclose the type of data collected and its purpose. Obtain explicit consent before using non-essential cookies (analytics or advertising). Provide an opt-out option without restricting access to the website. Globally, similar laws like the GDPR in the EU and CCPA in California impose strict cookie usage guidelines. What Can You Do? Read Cookie Policies: Look for details on what’s collected and why. Use Browser Controls: Block third-party cookies or clear them regularly. Install Privacy Extensions: Tools like Privacy Badger or uBlock Origin can block tracking. Reject Non-Essential Cookies: If a website denies access, consider alternatives. Future of Cookies Many browsers, like Chrome and Safari, are phasing out third-party cookies in favor of more privacy-centric models. This shift could reshape how websites handle data. Cookies might seem small, but their implications are vast. Being aware of how they work and taking steps to protect your privacy is crucial in today’s digital landscape.

[@chriswalls5648]

Ireland is in the EU.

[@karkluvalks]

Baltics as well...

[@Airstrip1TV]

And we’re leaving.......

[@lysaali50]

@@Airstrip1TV Ireland's not part of Britain. And N.Ireland wants to rejoin Ireland

[@cymrocymraeg5352]

@@lysaali50 And Wales wants to leave the UK

[@여호중]

@@Airstrip1TV .

[@Victor-tl4dk]

3:53 well that part is not 'enforceable' unless they have some base in an EU country.

[@FBI-dd1os]

from your map of countries in the EU why isn't Ireland highlighted??? IreExit???

[@shadowolf3998]

Personal Data of any kind must be protected by the laws of all states therefore this is a good act before people turn paranoid and start doing crazy bad things to the companies or such. The law is meant to serve the people.

[@InsideBoxingBrain]

This relates so well to a recent data breach in the UK and US. More and more businesses are taking notice and starting to consent to their data subjects rights. I've made an explainer video on my page detailing the risk of data breaches and the business psychology behind why they sometimes happen.

[@Real-Name..Maqavoy]

US; Probably.. UK: Doubtful. _______ Others in *EU?* ~ Don't get 4:40 Started...

[@mazaki2909]

i cant find it on your page, please share with me.

[@blaingunter]

Cool. Stop making the internet worse for everyone.

[@confect1on]

Got 22 emails since Monday on this. Maybe more. I don’t even remember signing up for some of them. Businesses must be freaking out. And businesses know other businesses are freaking out. reFX’s began with “Yes, this is another one of those emails...” This is quite something.

[@datasecteacher1895]

Thank you for providing basic information on the GDPR in this video!

[@paulstevens6929]

Here is something you will be interested in I was 19 yrs old and a now retired cop had my dentist implant me without my knowledge or concent electronic devices for his son to have a job for life stalking me study own. 24/7.his son got into my workplace pluged into computer and a gathering he said hows an immigrant like him buy houses and cars like he does. I moved from Leicester to Northampton and so did he

[@sergeijegorov1440]

I like how all the baltics, despite being part of the EU, were grayed out as if we are external to the EU... shame

[@skintythe1andonly]

The baltics and Ireland are in the EU

[@Kaslabarak]

So personal info will worth even more.

[@marccawood]

2:20 That can't be accurate: "if you don't reply to the emails then that company should delete your information from their system". Nobody replies to these mails - are we all getting deleted?

Marc Cawood No, it's incorrect.

[@swunt10]

only if they sent you the email without actually having a reason to store your information. so basically all the companies that send these emails, even though the costumer already agreed somewhere to receiving emails from them, didn't have to send them in the first place. everyone else was wrong to even send the emails about the new laws to begin with. so they definitely need to delete you from their lists.

[@renehoyvik]

One of the new rules is that silence should no longer be accepted as concent. How that affects these emails specifically though, i don't know, but generally, if you have gotten an email, from say spotify, a service you have already agreed and accepted their privacy policy, you don't need to reply to the email, because you have already clicked an "accept" button when you signed up for the service. But if you receive an email from a service that has simply bought your information, those will have to delete you're information from their servers unless you agree to allow them to keep it.

[@tuserbiswas5503]

useful but not correct all info. presentation of the lady not clear.

[@mindaugasskurvydas1898]

Forgot to include the Baltics in the EU map :)

[@dimitristzikas5695]

Triggered

[@efenty6235]

and ireland and norway too

[@jshdhsgsh]

Sometime in the future, say you wanted to delete facebook account. Can they also demand that you what'sapp account is linked and would also me deleted? Does GDPR allow for selective removal of personal accounts from different services provided by the same company?

[@ex6eu]

In this video, at 3:45 - why is Ireland not part of the EU?

[@jiayunhuang9042]

1. for art.82.2 of GDPR, it rules that the controller who is involved in processing shall be liable...the word like it, so it can be deduced that there is the controller who is not involved in processing, and such a situation is not ruled in this article. but it still has two cases for that: from the beginning, the contract between them rules that the controller will not involve the processing and all of it grants the processor, it's lawful. another is that the processor illegally replaces the controller, which violates art.79,80. this aspect, the “processor” is the “controller” and becomes the subject of the liability towards the data subject, that is no liability for the original controller? 2. the situation what I have illustrated above have been the controller involving in (must have the solution of its liability) and the controller will not involving in at all. but I still consider that there is the situation that the there is the only controller and then it should be responsible for its behavior, then it can be explained the compensation of art.84 (government), for that one case that the government will operate national responsible for network surveillance. so I think there is the relationship that only happens between controller and data subject. but it still has the doubt that the definition of the controller and processor in art.4.

[@truthbtold7268]

So is it only digital information or is things like copies of ID/Drivers license etc help by companies also included. E.g a sick cert with medical information on paper, is that also protected by GDPR?

[@sophiesmith5922]

In America, medical is protected by Hipaa but they are so ignorant the send info via unencrypted email and allow access via web. We have no data privacy act

[@FinCrimeAgent]

Thank you. The video provides a clear basic foundation on GDPR.

[@younotme1617]

You Tube LEAVE YOU NO CHOICE; EITHER AGREE OR YOU SIMPLY CANNOT USE !

[@ragon747]

That is a option from a privacy company. They have this right Is like: "my home, my rules"

[@johnbohan7231]

Why have you excluded Ireland from the EU? (at 3:50)

[@Joinmydailynews]

What does personal data means in the context of the General Data Protection Regulation. Please illustrate your answer with at least 3 examples of digital personal data.

[@zackzhang2916]

It's a great video, but the camera angle is really weird, it makes the host appear uncomfortable and that makes me feel the same.

[@korbanphoenix9650]

This video was very helpful. The Company i work for recently decided To change our health care provider without our consent and Gave the new company our personal details, but I can't work out if they can do this with out Consulting us

[@efenty6235]

i feel honored that channel 4 deemed my country worthy of being marked as an EU member

[@andrewmiller3228]

🇬🇧

[@ujjwaltripathi1178]

Too bad it’s not an EU member

[@manwithapurpose1]

She's pleasant, however to me, what was distracting was her posture, leaning to her right with her head unable to remain straight on its axis. This can often be a sign of postural tension, or inflammation. Watch her. Her head is almost always bent right and back. At some point, it's just very distracting. Get this woman a massage!

[@cassiusspacetrain2852]

vernevarona I'd give her a massage with my meat-saber

[@bruno-tt]

She’s reading the prompt next to the camera

[@forestdenizen6497]

It's meant to imply confidence and power. Laughable when combined with the squeaky schoolgirl voice but nvm. She is just reading a script.

[@TheLastCrumb.]

Scoliosis

[@MrDanielfff777]

She's pn codeine, that's why she leaning like a kick stand

[@cassiusspacetrain2852]

NEVER TRUST FACEBOOK

[@adamender9092]

Or Google

[@toxic_gyro_6667]

it was very helpful thank you.

[@JiaFit]

I am creating a website selling dresses, I dont know what to include and what not to in the T&C'c, Privacy Policy.

[@ICTIPlaw]

Creating Terms and Conditions (T&Cs) and a Privacy Policy for your website selling dresses is crucial for protecting your business and ensuring compliance with data protection laws. Here's a guide to help you: 1. Terms and Conditions (T&Cs) The T&Cs outline the rules users must agree to when using your website or purchasing your products. Here's what to include: Key Sections to Include: Introduction: Define your business, website, and what the T&Cs govern. Example: "These Terms and Conditions govern your use of [Website Name], operated by [Your Business Name], and the purchase of our products." Eligibility to Use: State who can access your site (e.g., age restrictions, location). Products and Services: Describe your products (e.g., dresses) and services (e.g., shipping, returns). Include disclaimers, like "Product colors may vary slightly due to photography." Pricing and Payment: Specify accepted payment methods and state that prices can change. Example: "Prices are listed in [currency] and may be updated without notice." Shipping and Delivery: Detail shipping times, methods, and costs. Include a disclaimer for delays beyond your control. Returns, Refunds, and Exchanges: Clearly explain your return and refund policies, including timelines and conditions. Intellectual Property: State that your website's content, logos, and images are your intellectual property. User Conduct: Prohibit activities like illegal transactions, hacking, or sharing offensive content. Limitation of Liability: Limit your liability for damages caused by product use or site issues. Example: "We are not liable for any loss or damage arising from the use of our products or services." Governing Law: Specify the legal jurisdiction applicable to your T&Cs (e.g., Kenyan laws). Contact Information: Provide your contact details for questions or disputes. 2. Privacy Policy This document explains how you handle customer data to comply with data protection laws like the GDPR. Key Sections to Include: Introduction: Describe your business and the purpose of the Privacy Policy. Example: "This Privacy Policy outlines how we collect, use, and protect your personal data." Data Collection: Specify what personal data you collect (e.g., names, email addresses, payment info). Mention how the data is collected (e.g., when users create an account, place an order, or subscribe to your newsletter). Purpose of Data Collection: Explain why you collect data (e.g., to process orders, deliver products, or send promotional emails). Sharing of Data: State whether you share data with third parties (e.g., payment processors, shipping companies). Cookies and Tracking Technologies: Explain your use of cookies (e.g., for analytics or personalized shopping experiences). Provide a link to your cookie policy if separate. Data Security: Describe the measures you take to secure user data. User Rights: Explain users’ rights under the Kenya Data Protection Act, such as the right to access, correct, or delete their data. Retention of Data: State how long you keep customer data. Changes to the Policy: Mention that you may update the policy and how users will be notified. Contact Information: Provide details for privacy-related inquiries. Best Practices: Use Simple Language: Avoid overly technical or legal jargon to ensure customers understand your policies. Make Them Accessible: Display links to the T&Cs and Privacy Policy prominently in the footer of your website. Get Consent: Before collecting personal data or using cookies, seek explicit consent from users. Consult a Lawyer: Especially for legally binding policies, consult a legal professional to ensure full compliance. Would you like a draft for either of these policies?

[@TheOshiomegie]

Who collects the fine? Who keeps the money if a company is fined for a data breach?

[@BlatentlyFakeName]

The government. But you'll be able to take action against a company miss-using your data for compensation.

[@helloworld0911]

The ICO does.

[@TheOshiomegie]

Gary Quan. Thank you. But if so, what does the ICO do with it?

[@helloworld0911]

leo oshiomegie The Information Commissioner oversees anything to do with Data Protection in the UK. Not too sure what she does with the money though.

[@hevergardenbuildings2080]

Really......there is a piece of legislation that benefits the ordinary man?....what's the catch?

[@botowner8623]

nothing, because peoole demanded it, well the catch is that it doesnt fix all privacy issues, so you still have to protect youe privacy regardeless

[@kolektivmozak238]

In essence nothing will change, beside loopholes, law mambo jabmo , for all black projects will be business as usual.

[@vicgoogle4514]

Dorde Dokanovic you have no idea what you’re talking about now do you?

[@manan11185]

If my client has a data of old customers, can I retrieve all email addresses and send them mass email using CRM ?

[@akmalhamizan8324]

I’m here because of Don’t Starve: Pocket Edition’s latest update, something about meeting GDPR Compliance. I seriously didn’t gain anything from this video’s points towards my curiousity.

[@JagdishKumar-ug2sy]

If I want to get work related GDPR then how can I get it?? Tell me the whole process and the necessary steps need to be taken.

[@FellowZAZA]

Is this the same as POPIA in South Africa

[@FelipeCampelo0]

What a piece of work

[@RazvanMihaeanu]

Nobody understands GDPR. You click "I agree" for nothing.

[@skillful101]

God bless the EU.

[@KPP365]

How do you prove who gives your details out ??

[@gabrielf8094]

Was it these guys that exposed the Cambridge Analytica / Facebook scandal? :o

[@lavendela9403]

How should one know that which companies holds data from you ??

[@yutumedia]

content starts at 0:53

[@eclipse369.]

I live in the US using vpn and just got a message saying a site was not available due to GDPR Way to go EU now we need this in USA I believe Andrew Yang is going in this route and with UBI charging any and all companies using our data with a VAT tax.

[@EscobarBLUE]

As far as ideas, can you cover the NSO Pegassus hack on Iphones please

[@StreamerHighlightsHQ834]

When filling out a GDPR form I saw I needed an officer and a representative. Who are these? What did they do? Can I label myself as both of them?

[@giorgiinaishvili7088]

Make a correction to your map. Georgia is a separate country, not a part of Russia.

[@kdeeuk]

to add to that some governments are the worst people who use peoples personal data, its all a bit hypocritical if you ask me

[@owenfitzgerald8944]

Can Zuckerberg be believed? So from this it look like we're going down a rabbit hole and have no idea where it leads.

[@Dragon-yw4xw]

British accent is so great.

[@adamender9092]

Ireland, Lithuania, Latvia and Estonia are in the eu

[@georgiostsirtsidis1125]

I don't believe in 'protection'.

[@sammm141]

Does anyone know which British accent exactly is she talking in?

[@ConnecttoSoul]

Thank you for your amazing ongoing understanding, imagination and thus expertise to sustain my experience to getting more consciously watchful combined with spiritually connected.

[@mhdalmurad8986]

saya juga mengucapkan terima kasih juga pada Anda semoga kedepannaya menjadi lebih baik data data tersebut dapat disimpan secara Aman dan terkendali

[@muffinbutton1484]

04:36 Mark ZOIBERG here looking like a fucking alien.

[@emperordalek102]

So this is to protect my data

[@gorbulas]

Nothing but a huge burden on small business in terms of compliance costs.

[@RealBadGaming52]

so was it delibertly designd to detroyed small business ? is it part of a big conspriicy to stamp out small business and makeway for big corperation.

[@andrewmiller3228]

Thank you #beamazed and ch4. Nuisance calls have been driving me mad.

[@shadowfox6438]

That awkward moment when you're an American and aren't have any trouble understand her at all.

[@jordane1350]

The only question was why weren’t these laws already?

[@SanctusObscurum]

jordan e they were. The gdpr isn't new, per se. It's replacing current data protection/privacy laws to make them better. Companies already had to demonstrate a legal basis for processing data and should already have rules around security and retention. Gdpr makes then take more accountability by keeping a detailed record of all data processing activities and by tightening their breach response to ensure they can notify you within 3 days of detection. There are a few other bits but as I said, it's not new. They taken what was good practice and simply made some bits more mandatory

[@sante354]

Can i use this as a reason To not give my Phone data To school

[@reknakfarg7252]

why would you ever give your phone data to a school?

[@Kr1s25]

It’s all fake as u think. If you are talking about insurance companies that they sell your details and share with third parties for them gdpr don’t exist.all insurance companies are non gdpr compliant .

[@spearchew]

starts 1:00

[@chefboyrdee1]

can you do a story on the Israeli land annexation ? also another on the Russian land annexation?

[@catherinemccann895]

Can you help me im with a bromford housing association the ceo has diverted my emails to a locality manager without my consent is that legal

[@lepidxptera]

Came from online school 🤘

[@maryammoghadami5080]

Iran????? Can you explain what you mean

[@evillano]

I'm trying to open a little eCommerce shop to sell my own digital products. According to this law, I can be fined 20 million euros for not complying with it. There's almost no information about how a micro business from across the world can be complaint, just the threat of enforcement by authoritarians who hide behind a pretty face to let their subject know that they are being watched.

[@toast2300]

I'm 9 months late and I know that, but if YOUR location isn't in EU and UK, you need to comply with gdpr only for EU and UK citizens, although, I might be wrong...

[@bashconsole]

should we pay for that?

[@Ankitttttttzz]

Hope india could work for something like this..!!

[@johnlightfoot9967]

GDPR seems good for businesses and bad for the majority of the general public.

[@jaygadhvi2174]

She looks like saorsia ronan did anyone noticed

[@kmo9111]

just make a id that no cant be missused by some. it changes every day.

[@photovideo215]

Skip to 55 seconds, that's how long it takes her to start the video. 🧐

[@catherinemccann895]

Can you help me on a housing company on a misrepresentation please

[@alrockman9173]

I have to sign into a book when I visit my gym but I can see everyone else's name in book that has been in before me & people can see my name if they sign in after me (I'm not happy with this) is the gym breaking the law

[@Kitiwake]

Yes. Its data and therefore comes within regs.

[@joeevans4006]

Everyone: island is part of the eu This video: haha island go brrrrrrr

[@KorabShala]

The map shown at around the 5th minute is an old map, at least 10 years. The country of Kosovo is missing entirely from the map. I hope this gets fixed soon.

[@ak12001]

channel 4 u need to employ some MORE educated personal u missed at least 4 EU countries .. is this been shown on TV ?

[@lroche3262]

I Just wonder whom all the fines go to.

[@mhdalmurad8986]

saya sangat setuju sekali untuk data data kita tidak bocor kemana mana sebagai perusahaan sudah tentu ada kewajibannya untuk melindungi data data tersebut tidak bocor dan tidak di salah gunakan oleh pihak pihak yg memanfaatkan nya

[@FishFreddy]

In some way this is great for me as a software developer. I'm not going to store that information. But Internet developers will still demand freedom of communication on the Internet. Something the UK doesn't care about. Nice the UK complies but we still don't care about your country government because you don't care about Internet Freedom. You have PROSECUTED someone for 2 years for teaching a dog to do a Hitler greeting. He placed it on the internet to annoy his girlfriend. The UK government makes itself more irrelevant towards the Internet. The local politicians care more about Internet "hate crimes" than their local actual crimes. More feelings than actual debate and policy.

[@SusannaIrma-k4s]

McDermott Underpass

[@built2last31]

just use a vpn

[@bryandalia323]

yes, I agree, however in the US, most companies dumb down the routers so you have to either build a DD-WRT /Tomato router www.ddwrt.org with HMA, as most major ISP’s have been "upgrading" clients to dumbed down versions of the g1100 that is not able to handle encryption. This woman is also an I-DOT and you are right, her accent drives me insane. LOL.

[@LeBronyaJames]

If only you change your MAC address. They can go as far as that to track your device, you might be found in a different location but they have your device on their system. The government's job is to spy on people sadly

[@offmyface1]

3:44 Ireland not in eu

[@ONeilBoyle-w4x]

Unique Fields

[@TheSimCaptain]

Is it illegal now to keep a diary, because it may contain personal information about other people? 1984?

[@Eyes-bv9sx]

Only if you were publishing that diary without changing the details of the people in it or gaining their informed consent, but that has been a rule since long before the data protection act. Otherwise you would run into the problem that every opinion or implication about a person that could be argued could potentially be grounds for a lawsuit.

[@TheSimCaptain]

@@Eyes-bv9sx We're talking about a private diary, right? So even a child who keeps a personal diary could be prosecuted. That's ludicrous. 1984!

[@Eyes-bv9sx]

@@TheSimCaptain A private diary would not be subject to these laws. The diary would be subject to these laws if it were published, but then it would no longer be private. Also, you cannot prosecute children.

[@tommy7837]

You don't need to spend the first minute telling me to Like, Comment, Subcribe, and Like. I'm a big boy now, and capable of deciding for myself whether it's worth liking, and why like something before it's seen? Also most people watching are already subscribed, so do we need to unsub, then resub? Or those that aren't subbed, are they supposed to subscribe just because you say so? Is it mandatory?

[@mkleng]

Basically, GDPR killed email.

[@riccardos2955]

and anticheats

[@kannikadaewamalai9944]

Pewds : (Enraged Viking Noises)

[@jamie-tl7ru]

The Republic of Ireland 🇮🇪 is part of the EU

[@xtianv3]

Camera angle is so anoying

[@cassiusspacetrain2852]

Christian Velasco because we can't see the tahtahs

[@Gamezogh]

[Story] Canada, Ontario's Real Estate Scene.

[@Bananzaization]

Oi! At 3:30 that is a Swiss flag not a sign for hospitals 😅 paramedic signs are a red cross on a white background. The Swiss flag is white cross on red ground as shown in your video. Get your stuff straight.. it makes people question the overall content.