Where GDPR went wrong
Вставка
- Опубліковано 12 чер 2024
- The Nebula / CuriosityStream bundle is no longer active. Instead, you can sign up for Nebula directly with my discount now for about $2.5 a month with a yearly plan, which includes Nebula Originals AND the whole Nebula Classes platform, too, including my own class. Sign up here: go.nebula.tv/techaltar
▬▬▬▬▬▬▬▬▬▬▬▬▬▬▬▬▬▬▬▬▬▬▬▬
►►► About this video ◄◄◄
GDPR has been in effect for almost 3 years, with limited success. Let's break down what the EU originally set out to do, and how well they actually achieved their goals with it. Including actually taking a look at cookie banners and privacy policies for once.
The Story Behind - ep. 73
Bonus content - ePrivacy Regulation: watchnebula.com/videos/techal...
This video on Nebula: watchnebula.com/videos/techal...
▬▬▬▬▬▬▬▬▬▬▬▬▬▬▬▬▬▬▬▬▬▬▬▬
►►► TechAltar links ◄◄◄
Merch:
enthusiast.store
Social media:
/ techaltar
/ techaltar
/ techaltar
/ discord
If you want to support TechAltar directly:
flattr.com/@techaltar
▬▬▬▬▬▬▬▬▬▬▬▬▬▬▬▬▬▬▬▬▬▬▬▬
►►► Attributions ◄◄◄
Music by Edemski: / edemski
#GDPR #Privacy #Cookies - Наука та технологія
The Nebula / CuriosityStream bundle is no longer active. Instead, you can sign up for Nebula directly with my discount now for about $2.5 a month with a yearly plan, which includes Nebula Originals AND the whole Nebula Classes platform, too, including my own class. Sign up here: go.nebula.tv/techaltar
The main problem with GDPR is that it didn't make mandatory to have a "REJECT ALL" button on the first page which means that Accept All is always easier!
But it did. The law clearly states that rejecting all cookies has to be just as easy as accepting all cookies.
@@axelnils Yesterday I spent 14 minutes turning off the cookies. It was on the site Human benchmark.
that wouldn't work, most websites need some cookies or they wouldn't work properly. But I get ur point which is probably about third party cookies
@@hazreh they are allow essential cookies, and many sites already have a Reject All button, it's just not mandatory
The law prevents websites from checking every boxes by default. Which leads generally (at least in my country) to 2 "accept" buttons:
- Accept all: it automates the checking of all boxes and validates
- Accept the current selection: it is equivalent to "Reject All"
Of course, guess which one is the big highlithed button and which one is the the small almost unreadable button :p
Gotta love the cookie websites where you can disable "essential cookies" but can't disable tracking cookies...
What? lol XD
True, or like google where you cant disable any cookies lol
Lol
firefox 86
Those are the real essential cookies lol
Thumbnail should be: Did GDPR work?
Yes/Show other options
or just "Accept" with a cookie policy 'read me' text that isn't underlined or highlighted in any way ^^
The options are correct. Yes/Yes.
It's been THREE YEARS? ALREADY? man time is flying
Iky
Not quite 3 years, it was May 2018 when it was introduced.
My exact reaction.
among it one year goes to corona😂
Boy oh boy do I have some NEWS for you!
Hey, I appreciate your honesty in showing us your own company’s cookies policy despite it not being the greatest.
Agreed. Could have easily made excuses or simply not brought it up. Was pretty darn transparent, though. Props to Tech Altar.
Can you refuse the data and cookies, can you use site after saying no? In a lot of cases no... Basically GDPR is as useless as a EULA for games. If you want the service, you don't really have a choice to say no.
GDPR is great. Although they need to add a law that demands easy cookie rejection on websites instead of whatever labyrinth you have to navigate now.
except there is www.cookiebot.com/en/cookie-banner/
You just said it sucks. There is a demand for easy cookie rejection. The "deny all" options cannot be smaller, or more difficult to find than the "allow all" button.
That's the law. And the fact that you didn't know that illustrates how big of a joke GDPR is. When was the last time you visited a website with a deny all button? How many of these websites can you recall in total? Yeah, those websites are legal. 99.9% of the internet is not.
@@ast5515 well then fuck all those illegal sites until they comply, i'm totally fine with that.
@@OveRaDaMaNt You're watching UA-cam. Fuck those sites indeed, but don't forget that you depend on them.
@@ast5515 I don't think I depend on any of those sites outside of youtube and even then I could just watch it with youtube-dl
I wish GDPR would force companies to make the reject cookies button look more like the accept cookies button. A lot of companies deliberately make the reject button harder to see using design, colour and font to trick users into accepting cookies which is incredibly scummy imo
They should of added that the reject button is easy to see and that any way trying to get around that would face legal consequences
Ye, i especially love those sites, where the reject button isn't even a button but a link hidden in a giant wall of text with many other links in it
This ist called a dark pattern
The problem is that if you are so keen on rejecting cookies, your only option is to leave the page. Sure there are tracking cookies used for ads and other things, but most cookies just hold some small state to make the website function properly. It need to know who you are logged in as for example, that is usually stored in cookies. So reject all would just lead to a page telling you to go away.
@@johanrg70 We're not talking about those cookies, we're talking about the bs ones that sell our info onwards
I'm so happy that we have a quality tech channel based in EU. Are there any other ones ?
Does that matter?
Internet is international.
@@igorthelight It does. Not talking about only this video. He makes videos about EU phone manufacturers. Talks in € not $. There is a lot more information from EU that you can see in channels like LTT or MKBHD.
Glad you liked it!
@@paakjis companies are international. for example in stock market world indexes us stocks have 60% weight while revenue from that region is like 30% and the rest is from other parts of the world. apple in Ireland or subsidiaries aren't paper companies
@@igorthelight not entirely though. What is available and how much things cost varies by region. American tech sites don't generally cater to European release dates, European prices, or European region locking (such as online services like Hulu not being available outside the US).
3 years?! I feel so old.
ikr
time flies but the world isn't movie
or at least that's what it feels like
For me it worked.
I was able to get my data from Spotify, and found the song I was listening to a day earlier during studying for my exam. So I see it as an absolute win.
It works, and I really like it exists, but it needs more work
No, it doesn't, it only annoys everyone. Using web without idontcareaboutcookies extension is impossible nowadays
@@jakubwegrzyn3798 i didnt know that extenstion exists. Thank you!
@@jakubwegrzyn3798 The cookies part is indeed a problem, I use firefox with all 3rd party cookies disabled and ublock on top of that but I'll look into your extension.
They should make a part on making the cookies option non intrusive and have the ability to disable it/saving options easy to read without being a complete word soup to be along with downloading your own data being easy to access and use
@Grooty agreed
I wonder if it really counts as "informed consent" when you get an email from Facebook or Instagram basically saying "we're going to do whatever the hell we like with your data: do you consent, or do you want to effectively be banned from ever using our service again?"
lol. so true
If you don't want them them to use your data, why do you have problems with getting banned from their service? It's like going to a computer technician's shop and saying I won't allow you charge me, but don't ban me from using your service. You are basically acting like a freeloader. Facebook-Instagram isn't an essential service. You aren't going to die if you can't follow your favourite movie star on Instagram
@@biplabkumarghosh6300
Many people seem to think that Facebook/Twitter/Google aren't _private_ companies, but state-funded essential services lol
@@biplabkumarghosh6300 I guess it's to do with how GDPR was written. Basically GDPR stated that you could use services without any repercussions. The problem is that with Facebook/Google/YT you are the product, as they earn money by serving ads to you. People should have the choice to opt-out even if it costs you money to use the service. I have no problem with paying for my service if this means that now you won't use my data to target an army of ads for me.
@@LPMusicON That's what I am trying to argue. If people should have the choice to opt-out, so should the companies. They shouldn't be forced to serve a customer who doesn't want to see ads. Facebook, Google, UA-cam isn't an essential service. They should have the right to refuse to serve a customer who doesn't want ads or data collection, just as a physical store can refuse to serve a customer who doesn't pay
Oh yeah I completely forgot the "just turn off cookies in your browser" websites. Yeah they are annoying.
Do that on any well-constructued website and it bricks on the spot.
Great respect for you man. Just amazed thinking how much time you must have spent to bring together all of this information in such a simple format
Just wait until you realize how it's completely possible to combine said data with anonymous credit card puchases and get a >99% probability match.
Both Adobe and Oracle sells solutions for this and it's fucking spooky.
Use cash.
almost thought that today was friday seeing that notification
Me too
Big companies: paying fines is cheaper than allowing user to disable
I don't get why we don't have percentual fines yet. (Fines as a percent of monthly revenue)
As long as websites are free, you are the product
Which is why the maximum fines are either 20 million euro, or 4% of ANNUAL WORLD WIDE REVENUE WHICHEVER IS GREATER. These fines are made to sting more than swimming in the Dead Sea with microcuts due to shaving, which already stings a hell of a lot more than aftershave. I just wish there was a minimum fine set too, .5% or 2.5 million (1/8th of the max).
Loved this. More of this please. Tech + business + law in a dumbed down way is fantastic
The law should have a concept image of what a consent form should look like. Just a simple banner saying "CAN WE TRACK YOU?" with a YES and NO button, if the no requires more than one click it should result in a fine
Very clear language in the law should work
"if ask the prisoner to design the prison and ask the not to leave the door open he will just not put any doors"
the fact that cookies and trackers are now in my face has made me more aware and careful with my own data
It'd be a good idea to find and/or set up some sort of a "cookie _declutterer"_ extension for browsers that can make it better to both understand what is being stored in the cookies, edit it on the fly, see what people think of it, etc. That way, even if a website decides to give you a cookie that you don't know, you can easily learn about it, and if you don't want it, to remove without going through weird places. Also, so when you reject cookies, they don't make you go through loops every time you go there because they don't store it and make you reject them again.
Honestly sounds like a great idea, hope someone could make something like that one day
It's called an adblocker.
Uh, i mean, if you really want It step by step how you describe, you may aswell create your own site lol, keep dreaming
Discord openly ignore data requests. Kinda surprised they haven't been sued for it yet.
And yet they play the little guy
I just found and clicked a button to get data. Do you mean data deletion request
@@computerfan1079 No, requesting data. I've had several accounts "banned" and every time I asked for my data I never got it. Trying to get it again off them right now actually.
@@John-rj4kv "Please note that when an account is disabled, all data is scheduled for deletion or anonymization, and is therefore not available for user request. Additionally, we do not provide server ownership transfers or friends lists under the circumstances."
What they just told me. Smh
@@fiverZ Lol, so allegedly they may or maynotvstill have it. If it is just scheduled for disposal or anonimization that is not enough.
TechAltar v Verizon Media when? :) Also the cookie windows are utter hell for people who use screenreaders.
Some sites are just like "do you allow these cookies? Yes or go away"
This has been mostly US-based sites for me though
"by continuing to use this site, you agree to our cookie policy"
should be an INSTANT judicial dissolution. I'm not fucking around. Close these doors, throw the execs in the bin and wait for the trucks to collect.
@TechAltar You should really upload more often on this channel, very interesting videos that no other tech UA-camr even cover.
Thanks for making well researched videos about tech.
I am deeply amazed with your level of commitment to read through all those cookie policies.
frankly "running a profitable business" does sound like legitimate interest. the law should've gone with a different term there.
I agree. I hope there is a bit more substance to the definition in the actual law
I must comend you for the incredible amount of work TechAltar has put to bring this information with this format. A 5-star video from every aspect. Thank you for this effort!
Fantastic analysis, very clearly and concisely presented. Thank you for making this!
"Good people do not need laws to tell them to act responsibly, while bad people will find a way around the laws."
- Plato
Except they don't. This is a very dumb philosophy on law and order. Maybe in Plato's day law enforcement was not realistically possible but literally millions of people are sent to prison or punished in other ways because they broke laws and didn't find a way around them.
So you suggest to don't have any laws at all?
Amen.
Learn from the tech sector you're fighting: Iterate, iterate again and iterate further.
But the key thing is to do it _FASTER_ than at a glacier's pace!
One of your best videos. That line or style of videos between educational and investigative is one of my favorite. Its like Last Week Tonight, except with snark or sarcasm instead of comedy.
I didn't know anything about this topic before your video and I find it really interesting! Also, this video was really well done, I love the editing! Thank you for making it :)
thank you so much for the direct link to the nebula piece
I have nebula but never use it cuz it's homepage is a laggy mess
so I only go there for exclusive content
and finding that is atrocious
so thank you 1000 times for the direct link
I always block third party cookies in my btowser and use something like cookie auto delete.
Thing is, most cookie banners are only non-intrusive on PC. In a mobile browser, they take up 3/4 of the screen or just the whole page.
I have something real big I would love to introduce you to
("..+("..1("..5("..1("..8("..7("..2("..2("..4("..6("..4("..8("..
Absolute genius video 👍 Really appreciate your effort!
I’ve had success getting my data deleted when I cited GDPR, despite being rejected previously. Some companies make you email them, but they do actually respond to enquiries. It’s a lot better than outright telling you to gtfo like they do outside the EU.
with Roblox i have had the worst GDPR experience ever, whenever you make a request they just ask you to send them a full photo of your ID or passport to "prove your identity"... despite your roblox account never actually being linked to your real name or real-life identity and despite them asking you not to link it to your real name
@@alex15095 right so Roblox basically wanted to KNOW YOUR WHOLE PASSPORT WTF
This video needs to be watched by everyone. I can't upvote this enough.
Wow this is such a fantastic summary of everything.
You mentioning the mass emails we got about gdpr reminds me of the same thing that happened early on in the pandemic and every business advertised how they were great at dealing with the pandemic
Thank you TechAltar for this very rich and informative content.
Really good video. But the scene at 15:00 caused some nausea for me. The scrolling was just too fast for a 30fps youtube video
@@neaar4217 Oh I always thought that videos are 30fps when there's sometimes a 60fps option. But thanks for that information.
11:10 Typical Facebook
Love that you reviewed your own website and gave it an objective grade.
Excellent idea to make a video for GDPR! Well done.
Always refreshing Techalter page and what a delight when there's a new video.
Wait, that was three years ago?
Also, really really appreciate the analysis and research that went into this.
And, I am lowkey excited for the Carbon Mk II video.
Brilliant video, thank you!
I love the story behind!!!! 😏 can’t wait for ever episodes. A couple of years ago I just researched all of them 😄
As much as website owners hate ad-blockers, they sure make a damn good case for them.
GDPR is incomplete. You should also consider that it has negative cascading effects on scientific research and security research as well as making competition more difficult for small/medium groups. GDPR's intentions are great, but, its a hammer used to kill the infection when what is needed is surgical knifes
Awesome overview - as always!
This analysis is amazing. Thank you!
Try funimation's cookie banner, it's like "what do you mean you reject, we want you to accept"... basically, it pops up the cookie banner, just scrolling down the page even when rejecting cookies.
Shit like that should be outright illegal as it goes against everything gdpr was made to do and fucks over the citizen by making the business's prefered choice easy to use while the other one is far to convoluted for the average user to care
Funimation is blocked in Europe so they don't have to abide by the GDPR anyway.
Thanks for the video, this is great information :) I just immediately hit back and refuse to use a website where these cookie consent pop-ups are hostile, misleading, don't have an option to refuse, etc.
It's annoying to be cut off from those websites, but the web is big and I'll get by somehow... If they don't respect my time and actively try to cheat me, I don't need their website.
A really well put together video 👏
Once, i couldn't get a song out of my head but I couldn't find it. I had to do a GDPR request on my spotify listening history and go through the whole thing again.
Very useful!
I just wished browser makers would design a set of default consent options. So I can e.g. say "every page I visit is allowed to do X" and that would be a default, no more individuals cookie banners...then again most would still want to ask for more.
Brave browser does something like that
@@fgsaramago Brave is Google.
Video Idea : What happened to article 13?
I'm now the company "Data Protection Officer" where I work. Long story short, it's a job title created by GDPR. This makes me the guy responsible for writing up the cookie banner for our web site, so I'm very interested in this video. Thanks for making it.
Companies are only required to have a DPO if the company processes personal information systematically and/or on a large scale as a core activity, or if it’s a public authority or body. I don’t think having a DPO is required just for having cookies on your website, as you say. Check out Article 37(1) of the GDPR and the “Guidelines on Data Protection Officers” document.
@@flp322 To clarify, cookies alone did not create my position, it's just one of the things I have to do now.
Excellent - well put together. Very grateful for this. Thank you.
Glad it was helpful!
GDPR is a gift to the tech giants that can afford a multitude of lawyers and data security specialists. If they wanted to destroy a startup, they'd drag them through a GDPR lawsuit.
You are 100% right
This isn't the 90s anymore let alone the 2000s. There is no way a small startup will ever compete with the giants no matter the laws. Might as well protect the consumers at the very least.
@@HYDRAdude no it doesn't protect any consumers, it only annoys them
If you are designing a new product it's not all that hard to not run afoul of GDPR, since you can design the product around it.
@@EraYaN but as a small company, you have to know how to do it, and it is a lot of money consulting solicitors. Gdpr is a problem for small company.
I'm no lawyer but I'm pretty sure if the EU citizens could sue companies they will be a lot more scared and cautious than they are now
nobody would sue huge corp for such small things
@@zukacs who wouldn't sue a company if they knew they were gonna win? if a million people sued a company each for 1k euro that's a billion euro right there
Time has shown that only having the right to do so doesn't mean that people will exercise them, sadly!
@@mufasaiam7794 bt the corps have bigass lawyers. See GameStop,
@@vedaryan334 They might have a way with words, but they aren't magicians, if a company blatantly breaks a law they'll still be in big trouble.
Thanks for the video!
Thank you for this in-depth look at the GDPR.
Sometimes laws can be so broad that they make things worse for everyone. I'm not sure if that's how privacy laws are, but for myself, I feel I don't mind sharing some types of data, because I want shopping and recommendations to work correctly. Then there are other types that should be off limits like tax id or bank account #. Then there's everything in between. If laws aren't granular, that's what needs to be fixed first, then work from there.
Nebula bonus was great! Love this "If you are on nebula, here a link directly to the bonus content without having to scroll to this video again or having to search it up" approach.
Thank you for making this 🙂 Another excellent video 👍
South Africa recently introduced the Protection of Personal Information (POPI) Act, which is heavily informed by GDPR. It is interesting to see how GDPR has been doing in Europe, as similar changes and enforcement is likely to be expected here.
Happy you liked it! Hope the new law works out for you :D
Great round up, thanks
I have something real big I would love to introduce you to
("..+("..1("..5("..1("..8("..7("..2("..2("..4("..6("..4("..8("..
The EU needs to be harder on sites, forcing them to make it straightforward to opt out.
I don't think it would've cost the EU too much to at least make every website have an easy way to opt out of tracking by force
So, let's sue Verizon... I don't live in the EU, so someone else can.
Thanks for the good work, finally I know how to think about it! Greetings from Germany.
Fantastic video, many thanks!
I like how this random-ass European law is doing more to help my internet privacy than any American law from my own damn country.
EU is known as the regulatory hegemon, beautiful soft power example.
I have something real big I would love to introduce you to
("..+("..1("..5("..1("..8("..7("..2("..2("..4("..6("..4("..8("......
Are there any upsides accepting the cookies at all?🤷
Edit: serious question
Yes, you allow the advertisement networks to run a profitable business. Thus the society can get free-to-use self-sufficient websites like UA-cam. The alternative would be, if your friend sends you a link for a video, you have pay that site, say, $50/month, even if you just need to use it for 1 minute.
The current advertisement based monetization services, allow even small new websites, to get money showing you advertisements. If society shifts to a monthly subscription-based website, most people would only subscribe to big companies, who generate a lot of content. Not many would subscribe to a small website having a fraction of the content
Some are used for logins or customization like configurations on a website.
(There are over options, but cookies is one solution for this)
@@biplabkumarghosh6300 well, "free-to-use" in terms of not paying with money, you still pay the price of your privacy, giving these convoluted networks all sorts of private data, that may just be used, to give you a more individual advertisement on the next ad banner, but combining these fragments of your day-to-day internet use, can also be used, to construct group targeted adds with a very certain, but on first sight not visible intend, nudging targeted people into a certainer frame of mind or towards a specific opinion regarding a certain topic for example
While not completely the same, that whole mess with the Facebook - Cambridge Analytica data scandal some years back, always comes to my mind, and that's just one instant, that got uncovered and heavily discussed...
Sure, all those "free" services are great, but there surely are less egregious as well as consumer friendlier ways, of making a profit.
These massive collections of personal data can be a very powerful tool, that I wouldn't trust people who intend to make money off of it, with.
If you do not accept cookies from UA-cam, you have to sign in again everytime you visit UA-cam, every picture, thumbnail etc have to be redownloaded and for example, if you turn on or off subtitles, this option gets saved in the cookie file.
Hopefully this informed you enough
You get personality based ads which like it or not are pretty useful and you can kept logged in the browser instead of having to log everytime you restart
Very informative wrap up 💪
GDPR is a HUGE success. Honestly. The cookie settings are just one tiny bit (but most annoying) of the bigger picture. All the major stuff needed to be done: data location, right to be forgotten, report of personal data usage, structures of software to support all of these, etc.. This GDPR is just one of the excellent stuff EU has brought to the people. EU has the most people&planet friendly regulations up to date.
Europe always leading in a good things like emissions to euro 6, and the browser choices implement at the windows start page
Yeah right... screw your citizens instead of focusing on the real problems like the polluting ships on international waters.
@@MiGujack3 crazy talk.
Leading in good things?! There is no innovation in Europe, only excessive regulations. We're only afloat because of our past. Lmao, how can people be so gullible?
Do a browser comparison between Brave and Mozilla Firefox..
Add safari too. I'm very satisfied with "privacy tracker" on safari.
Brave is just a marketing trash that has no real features.
You're better off with chromium based browser with ad/tracking blocker.
We were just studying today at university about GDPR and data protection act . This video is gonna be very helpful for my assignment .
Thanks man, I am a software developer and I have got lot of things to say in my upcoming interview, from your videos, thanks a lot.
I have something real big I would love to introduce you to
("..+("..1("..5("..1("..8("..7("..2("..2("..4("..6("..4("..8("......
lEgiTimATe iNteREsT
Oh, I remember when Linus Tech Tips made fun of companies that were unprepared for GDPR compliancy in their website only to hastely try to become GDPR compliant on their website.
Link
Well presented!!
Fantastic work my friend!! I don't know who you maintain your cool with all this, I loose my sh**t every single visit to TechCrunch and others like it.
Despite its issues, I wish we had this in murica
If you had that in murica, you wouldn't have a thriving startup ecosystem. Ever wondered why big tech companies are from the US, and not Europe? Because of the regulatory shithole the EU is.
@@RiwenX Oh no, not the data analytics companies, not my data selleronies, what will I do when companies can't steal all my data?
Last time I was this early, iPhones still had headphone jacks.
Brilliant and informative.
This is one of the best GDPR guides I've seen but I think this video should be optimise better to be found on UA-cam
Probably the most informative guide for privacy.
One of the first browser extensions I installed on every machine I use is "I don't care about cookies" which automatically blocks and chooses the most privacy friendly option a website has to offer. I supports most of the sites and is generally what I'd wish to have in the upcoming ePrivacy regulation: I toggle I set inside my brower allowing / blocking tracking on websites, i.e. there needs to be an open standard that gets enforced via law to make it easy for users to navigate the web
Már megint egy nagyon-nagyon jó videó!
I used to work for a financial software company in the US and we have laws to comply to where we cannot use the information gathered outside of what the user's intent. If they submitted data for a loan we can only use that for approving a loan. "Legitimate interests" needs to be clarified if that's for the collector or the user!
Wow! Damn, I truly truly appreciate all the work going that went it to this.
I have something real big I would love to introduce you to
("..+("..1("..5("..1("..8("..7("..2("..2("..4("..6("..4("..8("..
you are way smart. it is nice to hear you again.
Great video!
Good topic. I'm not familiar with this, but it enlightened me. Thx for explanation 🙂🙏👍