GDPR: What Is It and How Might It Affect You?

The European Union's General Data Protection Regulation on data privacy will come into force on May 25, 2018. This video explains how it could affect you, even if you don't live in the EU.
Don’t miss a WSJ video, subscribe here: bit.ly/14Q81Xy
More from the Wall Street Journal:
Visit WSJ.com: www.wsj.com
Visit the WSJ Video Center: wsj.com/video
On Facebook: / videos
On Twitter: / wsj
On Snapchat: on.wsj.com/2ra...

[@MatthewJBD]

If you do not not want to not receive emails from us please do not not check the following box.

[@YKDSGN]

Noticed this too. Real devil at work.

[@datasecteacher1895]

Plottwist: GDPR is valid for almost every business that acts across its country borders.

[@sumnormal1]

Speed up 1.25

[@MatthewJBD]

Fernando Muley yeah absolutely.

[@Simon-nx1sc]

I set it to 1.5 and it was still perfectly fine.

[@bu3ouf91]

🤣🤣🤣

[@Mikeeeeeeeeeeeeeeeeeeee]

2x ;D

[@viveksmartguy]

try 0.25

[@pcross2594]

Thank you for the information kind stranger. This will educate me and my 15 years of ICT experience

[@teddybear-yx7rd]

Again. if EU wanted to give us privacy, they would provide end-to-end encryption. Instead, we get a piece of paper. What we get is a popup on every website that asks for "consent". In addition, the idea that data can be "removed" from the internet is ridiculous. Once you put something on the internet, its out there... and it will stay there (forever) no matter how many laws you write.

[@nepalihercules]

it's not about removing it from the internet everywhere. it's about removing it from the servers of big companies. information will always be out there but it'll be 100 times harder to find. how often do you go on the 100 pages of google?

[@SirDavidPaladin]

Meanwhile, in the US, Trump is now allowing ISPs to control and select data. Hurray!

[@Tatrii]

Aye I love America. I do, just not the people who run it.

[@fahoudey]

Trump is not the one who institute laws

[@Tatrii]

He will when it comes to net neutrality, if it ends up on his desk it will be up to him to decide whether these ISP's can control everything we do online.

[@felixeisenhauer4519]

It's hard for me to imagine my internet life without using a VPN to overstep all these regulations. I am a nordvpn user, the service didn't disappoint me at all

[@Tatrii]

Where are you located, Felix? If the ISP's wanted to they could use a whitelist system and not allow encrypted traffic thru.

[@HorrorGodzilla54]

I thought it was 'Godzilla Destruction Prepared Radiation' or something like that.

[@ninjapotato9274]

thanks for the heads up! I will make sure I am ready for May 25th!

[@CraftyShawn]

Can't wait to see how this work out

[@lordbossharrow]

check your email and you'll see how it's working out

[@MrVidification]

In reality - it's no better than those pop up boxes on personal info before you install any android app. In a pc browser you now have annoying pop ups on a few websites in order to view them, in which you have to accept regardless to use them at all, or change website. There isn't always an 'opt out'. Websites still do not always give real details as to what they gather or do with personal data on a wider level, or how they profit, only vague information. What companies they may share info with can be occaionally listed but what info goes where and what websites are connected may still be unknown. The right to be forgotten is about as reliable as telling a marketing company not to call you ever again after they have shared your number with thousands of others. Regardless as to what you want any internet company not to to, you have no real control over them going against your will and sharing what they gather from you. The fact that your data can be shared with many companies in a matter of seconds thanks to technology doesn't exactly help either

[@TechTehScience]

There are certain pieces of data they are not allowed to collect, even if it's included in the box. If a company is found in possession of this data, it's a major blow to their operations and huge fines will proceed. I, as a European Citizen, am always quite happy to check what data they're collecting and if something makes me raise a brow (such as the Civ VI data) I just don't use it. It's given me the option with who I care that data to go to -- which is GREAT> Also, I found the call centre thing funny because I put my number on a governmental do-not call list and haven't had a single marketing company calling me since. So yes, it's just as useful as that. :^

[@Anti-FreedomD.P.R.ofSouthKorea]

It changed now

[@siegwardofcatarina100]

Thanks needed this for homework

[@martinsmith1261]

What is a DPO? Who needs a Data Protection Officer?

[@artisttwo22]

This is amazing . Thank u

[@alastairbarkley6572]

One year on and it's working our really well. It's been good to see US companies blowing smoke about how this doesn't apply to them and no way are they complying... and then knuckling under and complying. Almost all of them have seen that cutting the EU out of their business is a damaging strategy and those that actually have, well, who cares? So successful has GDPR been that it's turned into a sort of de-facto world data standard. Even Google and Facebook can't afford to lose 4% of their annual turnover. Well done Europe, well done EU, the largest market, the largest GDP in the world.

[@unknown000001000]

If the EU can do it, so can the US. :3

[@nolanharshman9182]

Nay, its all a political game in the US. Unfortunately it's not a bipartisan issue. Maybe some day though.

[@Amanda-cd6dm]

Why would the GDPR apply to someone living in America with no companies? Doesn't make sense

[@profiAcc]

So who and how can check if a company has applied GDPR correctly?

[@HumbertoGRNeto]

They don't apply. They have have to if they have costumers in the EU.

[@RandomDirectors]

Humberto Neto applied as in implemented the policies.

[@westtima]

This is payback for dumping that tea isn’t it?....

[@paoDaoGe]

English =! Entire EU

[@RamanKathpalia]

Pun intended!

[@sharlo3799]

Ye!

[@cinstudiek7179]

hey quick fun fact cyprus is in the European union and eurozone

[@jackiesmith2710]

How can it give more protection when you have to give out your personal information to strangers, including your bank details! I would rather keep my personal information to myself and close relatives, thank you! Companies change, governments change! I for one will not be filling any of these forms

[@lizvlx]

which forms are you talking about? u didnt understand this i am afraid...

[@onespiker]

Jackie Smith the states that they ( facebook and google cant sell and use your info).

[@mhdalmurad8986]

semoga ada manfaat nya bagi saya untuk terus belajar

[@1michael1963]

yes thank you, but how will china deal with this,

[@GangeArtCom]

I am seriously concidering taking anybody to court over this law.

[@kylefoss6624]

How do they enforce fines?

[@coconutcartel]

Just tried to access a site from us from europe . It was just a news site

[@AYCHMENG]

US you need to take notes

[@Tatrii]

We're going in the opposite direction. Did you know that soon our ISPs (you know the people we pay outrageous amounts of money for internet to) will be able to decide what we can and can't see online.

[@fahoudey]

And risk losing tech industry to china ? Beside what harm tech companies can do ?

[@AYCHMENG]

fahoudey please elaborate how we would lose the tech industry to China when they manufacture tech for almost everyone globally anyway ? I don’t get your statement.

[@fahoudey]

AYCHMENG I meant the software and internet based one, obviously the one with privacy issues my mistake for not eloblating

[@AYCHMENG]

fahoudey how does GDPR make china beat everyone in the tech industry?

[@quantechhd506]

wawooo amazing explanation

[@goodall1bay]

This should be call Data Collection Regulation.

[@mehnazawlad8602]

using store photos (available in the Internet when we click for images) of individual will be violation towards GDPR? if Yes then what is the process which will allow me to use stored images?

[@plonk8394]

Bump

[@tarnished439]

russian trollers comments paid by corporation to say how this is bad incoming...

[@kepobola7128]

Adam Jenkins I don't see how this is bad. Mind to explain?

[@puzzlingcentaur]

You keep using the popular boogymen and pretend that no honest disagreement exist, you can claim it's the Russians or Jews or Muslims or Aliens or witches, but the fact is that GDPR was very poorly thought out. The law was written the same for everyone, including small business that collect only what is required by law. The paperwork remains similiar for everyone. And it is a small bureaucratic nightmare.

[@tarnished439]

Norman Syarif exactly, has anybody found anything bad about it?

[@tarnished439]

Puzzling Centaur Your comments are arbitary and subjective at best but i will honor the first amendment. Dont just presume and assume, its easy to shape a narrative that fits your version as the truth. In reality, we see how internet companies has so much control over our personal data. Long and intentional legal T&C? Check. Implications from those data gathered? Check. I come from the legal sector in the corporate world and execs have special exemptions and options they can use using technicalities that they are aware of. Those privileges dont extend to us common folks, esp in the US. Maybe read the whole GDPR than projecting without a proper baseline.

[@VeggyZ]

This is bad because it's giving the tech companies an out - meaning they will still collect all that information, and they will still share it (sell it), and because "you signed the privacy policy" or "because you signed the terms of service" you can't do anything about it and do not get to call the shots on what is done with that information. You signed away your privacy, on everything, all across the board. It will also likely be used to keep the little guy down with fines, as these things tend to be. It's very abuseable, one of the largest data collection / copyright infringing countries in the world is for some strange reason exempt from these rules (that's China - look it up if you don't believe me) implies that it's entire purpose is to be abused by the ones with power, who write up those policies you have to agree to to use just about any service. Which also happens to put it in line with much of the other EU regulation / policy. This is not a good thing for the user - they make it sound like it is, but it's purpose is not to protect your data, it's to make new / larger market for your data and excuse that when it happens. Any time you look at one of these, and the companies affected are the biggest most advanced modern tech companies, you can be sure it's to their advantage, even if they word it like "they'll be the ones punished for sharing your data" - that isn't the case at all, because they're all having you sign your rights away at the start.

[@danwithjesus]

So is for businesses...got it...

[@vovano2006]

so what? keep all the data in Excel file?

[@AndreyPutilov]

1. Don't store this file on desktop. 2. Don't send client emails in an email (your company should provide some secure place instead) 3. Always know where do you store this excel file, do not create unnecesary backup copies, 4. Always know who has access to this data

[@kyriakoskyriakou]

The map in the video is wrong. Cyprus is in the EU.

[@DisconnectedRoamer]

Turkish

[@bantawi]

And a tally goes to Europe for protecting the individual. Good form 'ol chaps.

[@Gorilder]

GDPR+ Article 13 + Article 11 ? Wow Europe, say goodbye to whatever tech industry you have left.

[@alastairbarkley6572]

So, 12 months on and we see what nonsense your comment really was..

[@lolumaria]

anyway to know who has my data and request a mass deletion?

[@Tatrii]

Go to the companies website, if they're complying with the GDPR you'll be able to delete it somewhere on there.

[@carlodavies9227]

I guess that’s fair

[@andreboi1387]

Ciao

[@fahoudey]

This law sound more like a revenue source for the EU (20 million or 4% which ever higher!) And a PR move rather than 'protecting the privacy of the citizens'

[@lizvlx]

which part of the law? lawsuits against facebook have already been filed coz they not compliant fully.

[@jasoncummings7052]

Comply to what exactly. If people want to be irresponsible by putting their private lives on Facebook then that's their problem.

[@jasoncummings7052]

I totally agree. That is ALL it is. EU is more secretive than anyone else yet they lecture about transparency. So what if organizations use my data to generate income based on my shopping habits. Marketeers don't own my pocket. I control how I spend my money and I like the information on products and services available so I can choose. So what. Big data...at its heart is....Data. So without data analytics would not be possible. No security system is 100% secure....NONE!!! All anyone can do is put all the measures in place and audit their internal controls to mitigate risk. Beyond that if an organization is breached even after doing everything to prevent it then what....you fine them still.....BS EU is nothing more than a Nazi/Mafia. They are Unelected...Irremovable and Unaccountable. That is who is lecturing about privacy and data security.

[@SilverTigerPower]

I might be an idiot or old fashioned, but I can see this seriously being a problem and here is how ...*open up browser to whatever home page* "Hi you've reached ******* in order to continue we'll need a little bit of information, how we collect that information and what we do with it can be found here (a link to their ten page privacy policy) scroll down a bit, and now you have to click "lets go" now apply that to every website you want to visit...how fun? what privacy was protected?

[@kdeeuk]

this is why a vpn should be used it protects u without this garbage

[@johnkennedy7418]

Loved everything about it except the "certain conditions apply". There should never be conditions that need applied for an individual, we should all be considered equal.

[@Mdias8923]

The deletion depends, for one, if national laws of the member states dont have a superior conservation period for data that is mandatory, I cant delete for instance tax data because I have national law that requires me to held data for a certain period even if someone requires me to delete their tax data. Conditions are applied to everyone, this arent absolute rights because there are other obligations at stake as well.

[@Anti-FreedomD.P.R.ofSouthKorea]

Be born in Africa, or as a woman in Afghanistan or Iran. Everyone *should* be equal, but this unfortunately doesn't mean that everyone will be as ideally treated as so.

[@Amanda-cd6dm]

Even Jesus is equal

[@bwvanmanen]

Even when you treat everyone equal, conditions still apply to deleting personal data. If you order something and are allowed to request the deletion of your personal data before paying for the item, companies will go bankrupt. There needs to be some condition on who can request deletion of their data and when. Those are the conditions that apply.

[@blockchainbot.6596]

Thanks EU,America is hopeless this day.

[@oiulti6900]

So essentially, it’s all about clicking that “I agree” box twice?

[@AndreyPutilov]

No

[@angel3sappin914]

So what happens to Pornhub now?

[@sharlo3799]

Thanks, really, it affected a game that I play (: now that game is ruined hahaha Europe is amazing aren’t they

[@ggbg9756]

Quoicoubeh

[@saturnseven]

Two

[@migi7244]

Thank you Europe

[@onespiker]

Migi the EU is far to big of a market for many games to just cut them out.

[@Fortzon]

If a company or game is willing to cut out one of the biggest markets in the world from their servers just so they can keep their scheme running, it's a clear red flag for others that the company/game is selling their data without telling you and that the customer should leave immediately.

[@lizvlx]

the EU is the world's biggest market. so, beinng cut out from whatever online game is not an issue, companies cant afford not to produce for the EU in general. Plus, a game from north korea would be great. imagine, we even do business with iran here, #sowild

[@lawrencedtandaha1715]

Three..

[@DisconnectedRoamer]

Thank God the EU won't last long

[@alastairbarkley6572]

The European project has been going since 1960 and the EU proper since 1992. It's going from strength to strength.

[@DisconnectedRoamer]

@@alastairbarkley6572 that isn't a long time, most empires lasted long. It is due to collapse in the next 10-15 years

[@whatyouneedtoknow]

If you'd like to find out more about GDPR - and would like captions in 17 different languages - select our logo to visit our channel page.

[@fettifpeet]

Sounds like a great revenue source for the EU! Maybe someone wants to fill that brexit gap?! J/k lol

[@Samystery]

h

[@xxjustinxx350thegamer6]

First!

[@goodall1bay]

Let's be perfectly clear, this is not for our benefit.

[@KaikiasLP]

Could you elaborate on that?

[@tarnished439]

sure corporate, sure.. we definitely believe you until another Cambridge Analytica comes again. (how much did they pay you for this, I want to part time too)

[@KaikiasLP]

Yeah, I guess you can never be really sure about what happens behind the fassade, but at least this seems to be a step into the right direction.

[@Goaleez]

Very few companies are going to be 100 percent compliant on May 25th’. Read what GDPR is it and how might it affect you www.onlineprivacytips.co/security/gdpr-compliance-everything-you-need-to-know/

[@GeekBoy03]

It's going to make large companies such as Google more powerful as smaller companies will not be able to afford a compliance team. Many companies are already closing their doors. Good job morons!

[@Samystery]

h