The EU GDPR Explained
ฝัง
- เผยแพร่เมื่อ 5 ต.ค. 2024
- The first 200 people who head to brilliant.org/... will get 20% off their annual premium subscription of Brilliant.
You've probably gotten a deluge of e-mails regarding privacy policy updates in the wake of the European Union's new GDPR - but what does the law actually do?
Techquickie Merch Store: www.designbyhu...
Techquickie Movie Poster: shop.crowdmade...
Follow: / linustech
Leave a reply with your requests for future episodes, or tweet them here: / jmart604
Join the community: linustechtips.com
Intro Theme: Showdown by F.O.O.L from Monstercat - Best of 2016
Video Link: • Monstercat - Best of 2...
iTunes Download Link: itunes.apple.c...
Listen on Spotify: open.spotify.c...
Now explain article 13
and article 11
and article 3
And article 69
why make a video on something which might come earliest in 2019 and not even have the same wording anymore
and the internet rule 34
Ah. This explains all those emails.
it was passed over a year ago so they had plenty of time to comply with it but didn't until the last second
SandyStarchild actually they had two years to comply with it
Just making excuses
@Tradjick, you really are clueless aren't you.
This is not an overreach, it's protection. It shouldn't even be a regulation, it should just happen as it is.
Tradjick it isn't that difficult to be compliant with GPDR when building a new startup. For any company it shouldn't be a problem to get compliant within two years. It is expensive when enterprises forget about it until one month before it goes into full effect.
+Tradjick - Far be it from me to jump to over-hasty conclusions, but if a company is having serious trouble dealing with fairly straightforward legislation like this, I'm not sure I want that company to possess my private data in the first place...
I am in E. U. and i can the tell you, after GDPR the internet feels more smooth.
Max ACtion agreed
And now facebook is telling the EU to cancel GDPR or they will leave, best news I have herd out of GDPR :)
@@propotatogamingHopefully Facebook just leaves, page for misinformation anyway
"because it was implemented so recently plenty of large tech firms have been scrambling to make sure they don't get caught on the wrong side of the law." That doesn't really make sense. The law was already announced in 2016.
D. Brandtair wrong. It was already put in place and they gave all the companies a 2 year head start before they would enforce it.
Dukez Venom yes so in litteral form i said nothing wrong. It was announced back then.
D. Brandtair no attack towards you my man. Im just saying its even worse then how you described. Have a nice day ^^
make a video on article 13
Greetings from Poland, the land of Po
Article 13 TL;DR:
Companies must inform you of what data they're collecting, why, how they intend to use it, your right to revoke consent, your right to have a say in how your data is used and some other things.
I've simplified the article below, but it's the rough gist of it that most people should be able to understand and doesn't contain all of the details:
Part 1 is about data **collection**:
Companies collecting personal data on you must inform you about:
- Information on who is collecting the data and how to contact them
- The contact information of the data protection officer, where applicable
- The purpose behind collecting the data
- Who will use the data
Part 1 also details stuff about moving your data, safeguards and more.
Part 2 is about data **processing**:
Companies must:
- Inform you about how long your data is stored
- Inform you about the fact that you have a right:
¤ to request access to your data
¤ to request that your data be corrected
¤ to request that your data be deleted
¤ to restrict how the company is allowed to process your data (as in "You can't use my phone number for...")
¤ to object to the company processing your data at all
¤ to object to the company moving your data elsewhere
¤ to complain to appropriate authorities
- Inform you about whether the data is required as part of a contract
- Inform you about whether you're obligated to provide the data, as well as any consequences if you fail to do so.
- Inform you about whether your data will be processed by an automated system and the end goal of the processing.
Part 3 is about using your data in **new ways**:
If companies want to use data collected on you previously for a new purpose, they must inform you of this new purpose before using your data.
Part 4:
If you've already been informed of all of this, the company doesn't need to inform you again.
Gonzalo Fresu I live in the land of the free so the EU can piss off with their rules
i don't think he mean that article 13, just google #DeleteArt13
Adam Siekierski Pooland?
We've updated our privacy policy
for me, living in de #EU, the #gdpr (or #DSGVO as its call in german) its the best thing ever happened to my internet privacy.. since gpdr, i can delete my data an force companies to do that in a short time period (i try it 1 day after the law was startet at 3 different internet companies, and it works perfectly.. one company first does not respond, i send them an email, that im not asking for "maybee deleting my account", but forced them imediatly delete all my userdata.. they do not respond, so i wrote them, i send a mail to the "datenschutzbeauftragten des landes bayern" that the company will not respond.. after a few minutes, all my userdata was deleted..
and another positive sideeffect is: much less spammails - because now, the users in the eu have the possibility to force a lawsuit against spammail ;)
Agreed, the privacy improvements are incredibly great and not honored enough by some people imho
Agreed. I've long been saying that the EU is by far the best world organisation when it comes to protecting private individuals, and this is the most high-profile piece of legislation to prove that point yet.
Use spam filters, Tor and other means if you want your “privacy”. Get educated, stop being a noob. This new stupid reinforced law will only help criminals to blend in and to prepare the new attacks against EU citizen. The lawyers would also profit since they can attack the small companies and private business owners by picking on something in their declared privacy policy. Now a doctor isn’t allowed to address the patient by name without permission. A tourist isn’t allowed to take a picture in a public place unless he gets a consent of everyone who accidentally gets into the frame (good luck with that). You guys are crazy! EU reminds me of Soviet Union. And we know its fate.
P. S. Learn to use the shift key to type capital letters. Umschalten in German.
+Scorpy_ - Care to explain exactly how criminals will be aided by this regulation, why lawyers (who would act on the behalf of private individuals in this case) getting a legal edge over companies is on balance a bad thing, or indeed what makes the EU remind you of the USSR? Just asking, because if we're just going to be spewing one-line statements, the credibility of those statements will rather depend on how thick a sample of air they _appear_ to have been pulled from, lacking any other evidence on which their merit could be judged. Your statements seem to me to come from rather thin air, so could you enlighten us with some logical arguments or statistical evidence that gives them at least a little merit? If not, most people would simply say you were "wrong"...
Scorpy_ congrats. I don't think I've ever witnessed such a collection of absolute bullshit in a comment before.
Tourists can't take photos in public places, get fucked. GDPR affects companies. Not individuals.
You as an individual are free to take images of whomever you so wish providing you're not breaking any other law. GDPR doesn't even factor into it.
As for your doctor addressing you by name, again more bullshit. You've given him your details and medical info to use in diagnosing you, using your name to refer to you is expected legitimate usage of said information.
Seriously go and read the bloody thing instead of spouting complete shite in a comments section.
2:11 I like the fact that it's written in german
Is it true that Linus made Linux???
BOSTASH Maybe...
BOSTASH Linus torvalds, not Linus Sebastian
yes linus made linux. just not linus from linus tech tips and he didn't do it alone.
Yes. Linus Torvald
No Linus did not make Linux if he our Linus made Linux it would be more popular
What a tempo, it was quite fast paced yet detailed and interesting. Keep it up, this was great!
Can we just save memes? I dont want to give up my memes...
I can tell you a secret: In Germany we already have a law similar to Article 13, however guess what happened, nobody cared! And that's the exact same thing that will happen with art.13: Nobody cares, memes still get posted.
R But the new law will do this with a algorithm and if something copyrighted is found on a platform like youtube, the platform has to pay for it. That's why they are forced to censor the content before showing it to the public.
And how should this algorithm work exactly? Crawl the entire web every time someone uploads something?
TOmeiTO OW post a link to where in the legislation it even remotely suggests that.
Here's article 13 in full from the source itself.
eur-lex.europa.eu/legal-content/EN/TXT/?uri=uriserv:OJ.L_.2016.119.01.0001.01.ENG&toc=OJ:L:2016:119:TOC
Information and access to personal data
Article 13
Information to be provided where personal data are collected from the data subject
1. Where personal data relating to a data subject are collected from the data subject, the controller shall, at the time
when personal data are obtained, provide the data subject with all of the following information:
(a) the identity and the contact details of the controller and, where applicable, of the controller's representative;
(b) the contact details of the data protection officer, where applicable;
(c) the purposes of the processing for which the personal data are intended as well as the legal basis for the processing;
(d) where the processing is based on point (f) of Article 6(1), the legitimate interests pursued by the controller or by a
third party;
(e) the recipients or categories of recipients of the personal data, if any;
(f) where applicable, the fact that the controller intends to transfer personal data to a third country or international
organisation and the existence or absence of an adequacy decision by the Commission, or in the case of transfers
referred to in Article 46 or 47, or the second subparagraph of Article 49(1), reference to the appropriate or suitable
safeguards and the means by which to obtain a copy of them or where they have been made available.
2. In addition to the information referred to in paragraph 1, the controller shall, at the time when personal data are
obtained, provide the data subject with the following further information necessary to ensure fair and transparent
processing:
(a) the period for which the personal data will be stored, or if that is not possible, the criteria used to determine that
period;
(b) the existence of the right to request from the controller access to and rectification or erasure of personal data or
restriction of processing concerning the data subject or to object to processing as well as the right to data
portability;
(c) where the processing is based on point (a) of Article 6(1) or point (a) of Article 9(2), the existence of the right to
withdraw consent at any time, without affecting the lawfulness of processing based on consent before its withdrawal;
(d) the right to lodge a complaint with a supervisory authority;
(e) whether the provision of personal data is a statutory or contractual requirement, or a requirement necessary to enter
into a contract, as well as whether the data subject is obliged to provide the personal data and of the possible
consequences of failure to provide such data;
(f) the existence of automated decision-making, including profiling, referred to in Article 22(1) and (4) and, at least in
those cases, meaningful information about the logic involved, as well as the significance and the envisaged
consequences of such processing for the data subject.
3. Where the controller intends to further process the personal data for a purpose other than that for which the
personal data were collected, the controller shall provide the data subject prior to that further processing with
information on that other purpose and with any relevant further information as referred to in paragraph 2.
4. Paragraphs 1, 2 and 3 shall not apply where and insofar as the data subject already has the information.
Tbh copyright should be protected. Whether a fair use quota should be introduced is something different.
The end was a perfect segway for a PIA ad
These companies have had a little over 2 years to prepare for this, there is literally zero excuse to not have a privacy policy that is in compliance with the GDPR.
In out of the loop but man Linus looks different... I guess it's the lighting
Great topic for Jon to cover. Thanks for the quick, clear explanation!
Websites got much faster in the EU because they can't runn all tracking and ad scripts anymore. :D
That gave a good perspective how fast the internet could be.
True:
linustechtips.com/main/topic/931387-gdpr-brings-massive-speed-improvement-to-websites/
Not if you run pihole/ublock/ghostery by default, lol
has always been fast.
Yeah now comes the part where they sensor alternate media and ban memes...
and because everything is redacted...
Soo i have a question:
Does the GDPR also apply to government organisations like the police that has databases with very private data about us?
Why isn't this about article 11 and 13 they are much more important eu regulations .
They'll make a video on it. Next year.
Can you also explain art.11 and art.13? They probably hit us(internet users and content creators) the most. Many people are afraid of them.
While they are bad their effects are often overstated.
Article 11 and Article 13 won't affect end users and content creators at all. It will only affect large websites like search engines, video sites, social media, image sharing sites and so on. You won't have to do anything differently as a content creator and if you didn't do anything illegal before, you are not doing anything illegal after. You won't have to do anything differently.
Did you read them? doesn't sound like it. eur-lex.europa.eu/legal-content/EN/TXT/?uri=CELEX:52016PC0593 suggest you read the thing. Most people don't read it even once. Its not that long, especially article 13 is very easily understood.
jort93z There are legitimate issues with the regulation. Copyright was broken to begin with, but people typically don't care because it's not usually enforced.
EU regulations don't mean that its going to be enforced. there are many EU regulations nobody cares to enforce.
*We just updated our privacy policy*
With this ending, the sponsor should have been a VPN
Facebook does actually have different policies within and outside of the EU! Just because they say they are compliant everywhere that doesn't mean they are.
Not only are their policies different inside and outside the EU, but they moved the jurisdiction of their policy outside of the EU into the US for non-EU users.
Well i already known what GDPR is, but is awsome to know what is in in detail. Thanks! 😘
Is the work email, job title and name of an employee considered a confidential information?
GDPR was made in April 2016, companies just didn't give a fuck to comply earlier, because why bother when it comes into effect two years later. So all the scrambling is on them.
Last time I checked, the EU wanted to destroy all memes
Lelouch Yagami fake
Check again
Fake again
One small correction for the video. The map of Europe with EU member nations in Blue and the UK in orange, with the comment "your loss Britain" in the context of the GDPR is incorrect. GDPR came into force while the UK was a part of the EU, and thus the UK was obliged to bring it into law (under the Data Protection Act 2018). When the UK comes out of the EU in 2019 we will still have in law the Data Protection Act 2018 and thus UK nationals will still have the protection of the GDPR rules.
Also one of your slides is incorrect, the UK has the GDPR implemented as it has not yet formally left the EU
I know we did a brexit but the UK isn't out of the EU yet and we still have to comply with GDPR.
It's likely that we will just copy and paste GDPR regulation into British law when we eventually do leave.
Let's go waiting Google to be sued for listening to you 24/7 without permission
I got the first email of the soon-to-follow barrage right after I landed in London for my 1-week vacation off work. Thought I was being stalked by everything I've registered to online >_>
Thank you! I am glad to know.
Dennis did a really good job editing this one.
So informative
The idea behind GDPR is good. The execution, blows. Everyone just demanded you hand over all your rights to them, just so they have no risk associated with the data you represent. Regardless of if they intend to sell your data or not, they demanded you give them the right to do so, and so on. So, in the end, it got no better.
can you guys make a vid on how to avoid Packet Loss..pls
How does EU enforce this regulation on a non-EU company which does not have assets in EU?
You guys always use the wrong add. That comment about geoblocking would have been the perfect transition to an ad for PIA. Lol
"Consent" is a scam. I give no consent to anybody, but will click "I agree" to anything written in the too long to read terms and conditions just to use webpages.
Colour distortion with viewing angles as fast as possible
Your voice is little bit less understandable than Linus, so please work on it.
Legal John. :)
That little clip in another video (LinusTechTips, "legally approved", I think it was in the arcade video) with John was hilarious.
I hate GDPR so much!! First, every company sent an email that it will bla-bla, and now when I search something on google, and visit a random news site, it doesn't only ask for accepting the cookies, and blocking notifications, BUT also asks about my data that is collected!
The GDPR solves almost nothing really, because in order to use big companies sites, you have to agree to EVERYTHING, so this whole thing was just the waste of Companies' money, waste of time and now users get even more annoyed when they open pages they have never been before
Fair enough. It's all a matter of finding the right balance between privacy and practicality, and if you're completely on the practicality side of that scale, you might very well end up hating the GDPR.
I find GDPr very good as my internet experience is now better.
First of all oh no you have to click 2 or 3 buttons when you use a website you havent been on thats so much work. On the other hand mostly happens if you register at new websites because just a generic website isnt supposed to store your personal information. Third, GDPR does much more than just ask you if its okay that they store your data, now you can ask them to delete your Information or If they have any and they have to delete it if you ask them to.
It's kind of annoying when I'm trying to find a solution to something and it's the 6th site that blows a ton of boxes in my face to agree to this and that, cookies and sometimes even "subscribe via email". It's also not even about the first time I visit the website, because when I visit it on another computer, it shows all these boxes again. (Cookies aren't synchronised) . I would just like to open websites, read the text / use them, and then close them, because that's what I call internet service. At least people could opt out of these notifications on all the websites...
And how do those companies prove to me that they've truly deleted everything related to me?
Well then you shouldnt be mad about the GDPR but about those websites that they track all your data. The subscribe via email has nothing to do with the GDPR its just the website that wants you to sign up. And Ofcourse you have to do it every time you change your computer everything else would mean they exactly know who you are all of your devices and more. And for me personaly as a developer I dont have much problems with websites asking me for this and that its mostly cookies and thats fine thats how it has been for a long time. But I dont sign up for everything that asks me to do so if I dont want to i just go to another website and look if I can find it somewhere else. On the topic of how do companies prove they do deleted your information. There is no easy way to check if they did delete it. There are some ways to find out but its mostly that if you get spam from somewhere they would have to tell you where they got the information about you and if it is a site you asked to delete your stuff, well lets say they get fucked if they do it multiple times.
3:35 I knew there be a brexit joke in here.
Been waiting for this
Interessant dass die DSGVO mittlerweile auch in Amerika angekommen ist
Kaihaas ja
The EU announced the date this would come into force in 2016, so big companies should’ve sorted this out ages ago.
Well, you better secure all that information I'm going to loose!
Would you please include english non-automated subtitles for those who lack the understanding of pronunciation?
Thank you very much
Hey USA It's EU here. Look we know your going through some ehm.... 'stuff'' Don't worry about it, we got you on this one :)
RubX watch your ass .... Like literally
You should probably deal with your own orange first
Brett Van Overstraeten that gonna be pretty hard
*Archsider Stuff* Would you care to be more specific. Also should i consider your answer as a threat ?
Furthermore please restrain from using the word literally... Like ever!
Alright, you rascal you. Run along
RubX they grow so fast
Can you do a video on SANs and iSCSI and other big storage technologies
3:34 That hits hard
Please.. the pre-video outro is so annoying. I'm on the verge of making an userscript to skip every techquickie video I watch to 7 seconds.
That sounds handy. I usually just double tap the right side to skip ten seconds, or press the right arrow key on a PC.
I'm generally happy with the GDRP. It is there to protect the rights of the user. What annoys me now is some companies are geo blocking entire European market because they lack the capacity or willingness to implement this. You really have to ask why. Just this week I see that Williams Sonoma's web page is now a blank and they can't sell me any more of their fine products due to GDRP.
I don't think that'll last very long. The EU is the second-biggest market for most globally active companies that serve consumers, so while they might lock themselves out momentarily to avoid fines, they'd be royally shooting themselves in the foot by a long-term absence from the EU single market.
i never ask for consent
when i pet your cat.
The edit on this video was awesome! Did Taran took some dextrose?
Can you do a video about the proposed EU Article 11 and Article 13?
2:04 - careless and unsophisticated with a USB stick. ('tis a joke; please do not assassinate me)
You got a picture of a famous german youtuber in your Video, his name is Emrah
Could you do an episode about the Article 13 things that's going on in Europe ?
Hey, Jon. Can we get a video on why the EU is banning memes?
You still have to click "I accept" on everything, wether it's free or paid. It just makes it look like it's a more honest approach
Most of them don't even have an accept button. It's just "by using this website you agree."
This is not the correct way of implementation. The right way allows you to opt-in only the necessary cookies for visiting the site and opting-out of any marketing or statistics they track. The website owner just did not do a good job. See just as an example the site www.cookiebot.com/ (Im not promoting it)
Is it better than GDDR5 and GDDR6?
OK BUT DON T TOUCH MY MEMES, PLZ
the eu is gonna touch thos dank memes, sir. just wait for article 13
ERROR 404 eu has to choose beetwen leaving memes and riot, if i would be eu i would choose leaving the memes bcz they have an important role in modern society.
banning memes... the EU are not men of culture aswell
Don't get me wrong, I think the EU and GDPR are great, but the upcoming censorship-like upload filters and advanced copyright laws are something I hope the EU parliament will avert.
Same
This video didnt show up in any of my recomends and I didn't get a notification for it ??
Please do a MBR and GPT as fast as possible
"The Right to be Forgotten" is such a cool feature... cool sounding too. As a web-developer I guarantee companies aren't implementing any of this anywhere near correctly, and it will be hard to prove it in any court since code can't become part of a court record (as your code is your product).
How does it count as code and not database info?
Very nice video, Jon :)
Linus did not got the info.
1:02 That's some really *brown* money. Why didn't you just use our local CAD money. That way it's not kept bland.
The text went by too fast. Slow down please.
Should point out that the GDPR applies in the UK also and will be incorporated into uk law after leaving the EU.
You don't really have a choice if you want to use a service. They all force you to accept if you want to continue using it.
Thanks
Knock knock
Who's there?
GDPR
'GDPR' who?
I'm sorry, I can't tell you that.
Last time I was so early GDPR was not enforced.
Amazon couldn't delete my data on orders because they need it for legal purposes like tax stuff and proof that a certain order really did take place. Is this legal or are they still required to delete my data?
Nope, they must keep all data that other laws mandates them to keep. Amazon must remember what you ordered when for tax reasons, maybe more reasons.
being a web developer makes this really hard to have a website that does anything with data
Would using VPNs routed through the EU provide your data with the same "safety" (for lack of a better word)?
Had to give seminars of this to companies while I was working in Cyprus for a wee bit, bloody nightmare 😂
GDPR goes a lot further than online data. It covers the data your workplace has on you too for example. This was a good summary of what most people need to know about it though.
3:36 A clear dig at Brexit!
3:54 its 27kilo, if you do A+B+C it does 54, and /2 its 27
They still bypass this by just blocking you from their site if you dont consent.
How is that bypassing? If you're not paying with money or data, why would anyone offer you a service of any kind?
Antalz
Yeah, that's not bypassing but it is very deceptive. How many internet noobs know what it means to "consent to their data being collected"?
It's like a store asking if they can collect data on you for shopping there and then scanning your credit cards from your pocket and saying "they consented to it."
Btw, Britain has signed the GDPR into law, so despite Brexit it will continue to apply. In fact the UK offers some additional protections for people’s data specifically regarding the right to be forgotten and anything you publicly posted when 18 or under
Great video!
Damnn, you are forgetting a lot of rights and principles of the GDPR... also, there are a lot more nuances. However, this is a good summary and you selected the good number of articles for this video. Anyway, great work, but there is so much more to the GDPR than this video ;)
Its not about being streamlined or PR. Its because of how incredibly difficult it is to determine if you happen to be say, a German citizen that's vacationing in Florida. By the time they've figured out that you're German, they'd almost certainly have run afoul of the law.
And of course, it only applies to companies that are doing business in the EU in the first place. But thanks to the internet, that's basically every company with any sort of online presence. Under international treaties (which most countries subscribe to in some form or another,) even if you don't actively promote yourself in the EU or sell your product in the EU, your home country is likely to allow the EU to prosecute you should an EU citizen happen to sign up to your non-complying website.
Of course given Trump's propensity for ripping up treaties lately, I wouldn't trust US-based sites right now even with the GDPR in place unless they've explicitly told you they're complying. For services based in other countries that aren't currently going insane such as Canada, Australia, Japan, etc you're probably _fairly_ safe.. at least as safe as the GDPR protections take you.
Actually selling the data isn't permitted at all. In the rule of GDPR it would only be permitted if you gave the user the choice about it and the user accepted it. There is no way under the GDPR that you are allowed to store personal data (and even an IP address is considered personal data) for a longer amount of time with the intention to sell that information to a third party. If you store personal data, it should be temproary and only for the duration of the task you have to do with that information, and you should be able to prove that you really need that information for your business, your processing or because you are obliged by law.
On these kinds of laws its (i think) best for a company to just stick to the most strict ones. Just to be on the save side
I wouldn't mind companies selling my information as long I get a cut from it.
thanks for the infos :)
"And because it was implemented so recently ..." U wot m8? It was already finished two years ago to give companies time to prepare for it. It's not the EUs fault that pretty much everybody was too lasy.
Ralph Eckstein I never talked about it making sense or not. I just don't like that everyone pretended like the EU pulled a fast one an now every company is forced to comply within a week.
My point was only that there were two years to prepare for it.
Which is really sad. Especially the smaller companies should have been excluded form this law.
The only thing this has done for me so far is make websites on mobile completely unusable. Full page consent banners and such
Can you do a vid on WVT files - Compuwx Export Data?
As much as I hate the EU at least they seem to care more about your privacy than other governments.
Roflcopter 35h workweek.... in switzerland 40h is the minimum, a lot of people have 42 or 45... i dont know where this is comming from that "eu has only 32h to work (or similar)" ...
Great! Thanks for this
The ending joke geoblocking screen might have been funnier if you knew the difference between lose and loose.