Speaker 1: It's been a month in a day since a massive
Speaker 1: change took place in Europe. So g d PR. That's
Speaker 1: the General Data Protection Regulation. It went into effect today
Speaker 1: in Europe, already coming into effect on May the twenty five.
Speaker 1: It applies to any company that collects personal data of
Speaker 1: EU citizens customers, for companies of all sizes. This was
Speaker 1: an end to business as usual. Now every European citizen
Speaker 1: has the right to control what happens to their data.
Speaker 1: There's never been allow like this before, and there are
Speaker 1: potentially big penalties for companies that don't comply. Just how
Speaker 1: huge four of global annual revenue. For a company with
Speaker 1: worldwide sales of a hundred billion dollars, that could mean
Speaker 1: penalties of four billion in certain circumstances. Almost every company
Speaker 1: collects data about us, and they're all subject to this law.
Speaker 1: Until now, we've had very little control over how companies
Speaker 1: use that information. It got me thinking about this new
Speaker 1: law means for us, the consumers. So I decided to
Speaker 1: find out. This new law gives us many powerful new rights.
Speaker 1: But how useful are those rights? What can I do
Speaker 1: with them? Hi? M Aquito and I'm Nates Lanson, And
Speaker 1: this weekend decrypted, Nate sets up to discover what data
Speaker 1: companies have on him and how much that data is worth.
Speaker 1: This new European law, called the General Data Protection Regulation,
Speaker 1: opens up all kinds of new possibilities for us as
Speaker 1: consumers to use our data for our own benefit by
Speaker 1: protecting ourselves from hackers, making our online lives more convenient,
Speaker 1: and maybe even making some money. This lot could also
Speaker 1: foster new services to help consumers get the most out
Speaker 1: of their data. I tried to find out how far
Speaker 1: away those business opportunities are from becoming reality. Stay with us.
Speaker 1: Perhaps the most well publicized part of this law is
Speaker 1: that any European citizen now has the right to approach
Speaker 1: any company and ask it to hand over all the
Speaker 1: data it has on them, and the company has to
Speaker 1: do this within a month. And Nate, let's quickly recap
Speaker 1: why you would want to have mountains of your own
Speaker 1: data like this. Well, there are several reasons. For some
Speaker 1: people worried about security. We can ask for our data
Speaker 1: back and then ask the company to delete it and
Speaker 1: most companies would have to comply with that. Okay, makes sense.
Speaker 1: Another reason is convenience. Many companies use our data to
Speaker 1: customize the ads we see and the promotions we receive
Speaker 1: from them. And the more data, the better the recommendations. Right,
Speaker 1: and GDPR allows us to move our data from one
Speaker 1: firm to another in order to have a better experience
Speaker 1: with the companies we like or prefer using. The other
Speaker 1: big principle in this law is about giving power back
Speaker 1: to the user. Our data has helped companies like Facebook
Speaker 1: and Google become enormously profitable. Now some of the games
Speaker 1: might trickle down to ordinary customers. In theory, the law
Speaker 1: allows us to take our data from one company and
Speaker 1: give it or sell it to another. In theory, yeah,
Speaker 1: I'll get into that a little later. So sell us
Speaker 1: which companies you reached out to. Well, at the top
Speaker 1: of my list were the big guys like Apple, Facebook, Google,
Speaker 1: But of course this law applies to every company, not
Speaker 1: just the Silicon Valley giants. Yeah, so I also went
Speaker 1: to a handful of smaller companies, like a local food
Speaker 1: delivery company here in the UK called Delivery and Okay, Cupid,
Speaker 1: the dating site where I actually met my wife. But
Speaker 1: my first challenge was to figure out how to submit
Speaker 1: a request. The thing is, I'm glad you thought this
Speaker 1: is a good idea, because when I first heard the idea,
Speaker 1: I thought, this is either never gonna work, or it's
Speaker 1: gonna work and be a massive invasion of my own
Speaker 1: personal privacy at my own hands and my fault. I
Speaker 1: asked an expert called Julian Saunders for some advice. Julian
Speaker 1: is the CEO of a company called Sports, and he
Speaker 1: helps businesses make sure they're complying with the new law.
Speaker 1: We started by going through all the documents I'd need
Speaker 1: to send off along with these requests. I'm guessing here
Speaker 1: because no one's put these these principles into place yet,
Speaker 1: but I'm guessing you're going to have to prove your identity.
Speaker 1: So in a way, I'm going to have to give
Speaker 1: them personal information in order to get my personal information.
Speaker 1: That's a little bit of a dilemma, yes, but it's true.
Speaker 1: It's an opportunity for businesses to learn even more about
Speaker 1: you and ask you if your data. If I'm having
Speaker 1: to basically say, okay, I want to check that you're
Speaker 1: trustworthy and you're you're responsible enough to have my information.
Speaker 1: So here's a scan of my passport and my driver's license.
Speaker 1: There's a delicious irony to that that that I didn't
Speaker 1: fully appreciate. The law is so new that I wasn't
Speaker 1: sure what to expect when I started submitting my requests.
Speaker 1: Big profitable companies like Apple and Facebook have mostly created
Speaker 1: easy one click landing pages where you can go and
Speaker 1: request your data. For smaller companies, though, there's no one
Speaker 1: click option, So I wrote a bunch of letters, and
Speaker 1: for good measure, I went old school and printed out
Speaker 1: hard copies in case I needed to use that classic
Speaker 1: old system that postal service. My guess is that you're
Speaker 1: going to be quite shocked at how many businesses aren't
Speaker 1: fully GDPR compliant. Julian did warn me the new GDPR
Speaker 1: regulations are so onerous and are such a big departure
Speaker 1: from the way many businesses are used to operating. There
Speaker 1: may be lots of companies that are still trying to
Speaker 1: get to grips with the law, even though it officially
Speaker 1: took effect over a month ago. The other thing is
Speaker 1: going to be really interesting is the extent to which
Speaker 1: they offer your data back to you, Because strictly speaking
Speaker 1: with the guidelines, they should be giving you, of course
Speaker 1: the information that you provided to them, but they should
Speaker 1: then be giving you back all the related information that
Speaker 1: has been generated around your profile while it's been in
Speaker 1: their organization, and the degree of extra data that they
Speaker 1: provide back is entirely dependent on their desire to be
Speaker 1: open and transparent with you and to give you everything
Speaker 1: that they've got, some of what they've got, none of
Speaker 1: what they've got, And there's really no way to know
Speaker 1: whether a company has fulfilled this larger requirement that Julian
Speaker 1: is talking about. So bearing all this in mind, I
Speaker 1: set out to get my data back. I'm starting with
Speaker 1: the service that fascinates me the most, the dating site. Okay, Cupid.
Speaker 1: You know, Nate, it's worth noting that you're married. Yeah,
Speaker 1: I am, And I thought I deleted my account years ago,
Speaker 1: and okay, Cupid definitely doesn't need my data anymore. So
Speaker 1: I was in for a bit of a surprise when
Speaker 1: I went to submit my data request and I've just
Speaker 1: been asked and do I want to restore my account?
Speaker 1: I've rest yes, And I'm actually now staring at my
Speaker 1: old dating account, including all the messages that I sent,
Speaker 1: my profile, pictures, my profile itself. I genuinely didn't see
Speaker 1: this before that I'm seeing this for the first time.
Speaker 1: My account isn't even closed, it was just deactivated. You know,
Speaker 1: you stand a little shocked here. I was. I genuinely
Speaker 1: thought I deleted my account. But what I probably did
Speaker 1: is just deactivated, which is an option okay Cupid office customers,
Speaker 1: instead of deleting it. And if you had deleted it,
Speaker 1: would okay, Cupid be obliged to destroy that data. Well, legally,
Speaker 1: they're obliged only to keep it as long as it's necessary.
Speaker 1: It doesn't have to be immediate. But I did suddenly
Speaker 1: have a bit of a mild panic. What if somehow
Speaker 1: my wife got notified or somehow found out that I'd
Speaker 1: reactivated my dating account. Hello, hey, it's me. I put
Speaker 1: my GDPR letters down and made a quick call to
Speaker 1: prevent any risk of divorce. I've just been on They've
Speaker 1: still got my profile, which I've reactivated, and I just thought,
Speaker 1: on the off chance that somehow you find out that
Speaker 1: I've reactivated my profile, I'm not trying to date other people. Okay,
Speaker 1: that's fine, I'm really gonna have you anyway. Thank you, excellent,
Speaker 1: And I think I like your wife already. Yeah, She's
Speaker 1: made it pretty clear that this is the last time
Speaker 1: she's going to let me cruise through dating profiles after
Speaker 1: she's gone to bed. But it was a stark reminder
Speaker 1: that businesses don't always delete the data they have on
Speaker 1: you just because you don't use this service anymore. That's
Speaker 1: one of the new powers consumers now have. Many companies
Speaker 1: have to destroy your data if you ask them to. Yeah,
Speaker 1: with a few exceptions, such as if a business has
Speaker 1: what's called a legitimate interest in the data. So a
Speaker 1: credit scoring company won't have to wipe your data if
Speaker 1: you ask it, for example. But before I could do
Speaker 1: anything with my okay Cupid data, I had to figure
Speaker 1: out who to even send my request to. Okay. So
Speaker 1: I'm staring now at my account page and I'm trying
Speaker 1: to work out how to find who to send this too.
Speaker 1: So I've gone into my account settings. There's a button
Speaker 1: here says privacy. I'm being offered hidden users, blocked users.
Speaker 1: This turned out to be harder than I expected. There
Speaker 1: was nowhere obvious on the Okaycupid website to submit a
Speaker 1: GDPR request. Okay, maybe gdp R, Nope, fine looking in
Speaker 1: the footer again, I've got at trans choices about careers.
Speaker 1: Was a little little submit a success story I suppose
Speaker 1: I could do that afterwards saying that I got married,
Speaker 1: or maybe the success stories that I found how to
Speaker 1: actually send this this information. I even tried buying contact
Speaker 1: info for okay Cupid, but that didn't get me anywhere.
Speaker 1: In the end, all I could do was send okay
Speaker 1: Cupid help request. So I'm going to put in this
Speaker 1: request as other help. I'm going to put subject g
Speaker 1: d p R request tell us your problem. Hello. My
Speaker 1: problem is that I couldn't figure out the fastest way
Speaker 1: to send you a request for my personal data, and
Speaker 1: it turned out this contact form was the best way
Speaker 1: to submit my request. But it's been four weeks and
Speaker 1: the company only just replied to ask for further proof
Speaker 1: of identity. You know, I'm kind of surprised how difficult
Speaker 1: of a time you've had because okay Cupid is owned
Speaker 1: by Match dot Com, which is a publicly traded company.
Speaker 1: It's not like they're this tiny, under resource start up. Yeah,
Speaker 1: I wish I knew. I mean, some companies just seemed
Speaker 1: to make it difficult to get in touch, either pointing
Speaker 1: users towards a generic inbox requests or asking users to
Speaker 1: use a feedback form. It's not the first I've seen it.
Speaker 1: I don't know. That sounds pretty risky. If this law
Speaker 1: has some pretty serious penalties for companies that aren't complying,
Speaker 1: that's the thing. I have no doubt they are complying.
Speaker 1: It's just that it's expensive for companies, even midsized ones
Speaker 1: like okay, Cupid or Match, to fully automated system. There's
Speaker 1: no formula for how data should be organized internally within
Speaker 1: a company either, so a lot of companies are still
Speaker 1: working things out and using more manual measures to make
Speaker 1: sure that they can at least comply with the law.
Speaker 1: I reached out to okay Cupid to find out why
Speaker 1: it took so long to reply to my initial GDPR request,
Speaker 1: but at the time of recording that email remains unanswered.
Speaker 1: The next company I approached was Delivery. Now I've used
Speaker 1: this food delivery company a load of times. You order
Speaker 1: meals through its website or app and they'll have someone
Speaker 1: bring it to you. It's the biggest competitor to Uber Eats,
Speaker 1: although here in Europe, Delivery is actually a lot bigger
Speaker 1: than Uber's service. Okay, well, let's just realize that deliver
Speaker 1: rou is just around the corner, quite literally from Bloomberg's
Speaker 1: office here in the financial districts of London. So so
Speaker 1: of thought if I can give this letter to them
Speaker 1: in person. As a relatively young but rapidly expanding startup,
Speaker 1: Delivery is a good example of a company that's quickly
Speaker 1: ended up accumulating vast amounts of data delivering hundreds of
Speaker 1: millions of meals to its customers, and so it had
Speaker 1: to build out its privacy team to ensure it complied
Speaker 1: with the law. And it's also part of a surging
Speaker 1: food delivery market with fierce competition across Europe. So all
Speaker 1: that data has on you could be of great interest
Speaker 1: to a competitor or vice versa exactly. And I really
Speaker 1: like Delivery, so it's in my hands to make sure
Speaker 1: it's the right company to have the records of all
Speaker 1: my embarrassing dining habits. Oh yeah, I can just slack Jill. Okay,
Speaker 1: we can just leake. I was here to meet Jill Pollock,
Speaker 1: Delivery's data protection officer. I was taken through Delivery's headquarters,
Speaker 1: an open plan workspace complete with a miniature basketball court.
Speaker 1: There was actually being used to screen a soccer game
Speaker 1: while employees sat working on bean bag chairs how're they go?
Speaker 1: Good to meet you? Hello, can I give you this?
Speaker 1: This is a request for all of my data from delivery.
Speaker 1: Oh yes, let me app and have a look. Okay, thanks,
Speaker 1: Actually probably don't need to do that now, but at
Speaker 1: some point in the next few days will be would
Speaker 1: be contested. I'm taking it now as you're here in past. Okay,
Speaker 1: thank you. Just checking that it's valid requst this will
Speaker 1: be incredibly embarrassing if it isn't. Well, actually, there are
Speaker 1: very few formalities which show needed for request. Just wanted
Speaker 1: to check this same email dress that we have on
Speaker 1: far for you. She allows me to verify that you
Speaker 1: are truly who say you are. Um, So yes, we
Speaker 1: can process this request for f you and 'll be
Speaker 1: in touch with your data. For companies that process large
Speaker 1: amounts of user data, GDPR requires them to appoint a
Speaker 1: data protection officer to make sure that the public knows
Speaker 1: exactly who they can go to if they have concerns
Speaker 1: or questions about their personal information, and that's what Jill
Speaker 1: does for deliver U. But I also wants to whether
Speaker 1: any customers had tried to give her their data from
Speaker 1: rival food delivery companies, so Delivery could personalize their service.
Speaker 1: We have not had to request like this. It's a
Speaker 1: very interesting idea. You're referring, of course, here to the
Speaker 1: right of data portability, which is a new GDPR right.
Speaker 1: I think there's probably more appetite for customers to do
Speaker 1: this with companies like social networks or perhaps the music
Speaker 1: streaming services. I've been wondering whether a lot of people
Speaker 1: are trying to now move their playlists to title now
Speaker 1: the new Beyonce album is on that that's an interesting example, Nick.
Speaker 1: Do you think you'd ever consider doing something like that? Um, well,
Speaker 1: if by Beyonce you mean Metallica or Flesh Got Apocalypse,
Speaker 1: then maybe. Otherwise no, but there's probably an opportunity here
Speaker 1: for smaller companies to encourage their customers to hand over
Speaker 1: their data from a competitor like this. Yeah, if I
Speaker 1: could get free burgers for a week with Delivery by
Speaker 1: giving the company my burger buying history from Uber Eats,
Speaker 1: I probably would. And so, with another GDP IR request filed,
Speaker 1: I was good to leave Delivery's building. Well, that was
Speaker 1: very successful. I don't really know what else to do now,
Speaker 1: except wait, I suppose I'll get lunch. I should really
Speaker 1: mules in there. After all that, Jill couldn't just hand
Speaker 1: me my data, so I'm still waiting for Delivery to
Speaker 1: send it to me. But I did hear back from
Speaker 1: some of the big tech companies Apple and Facebook, and
Speaker 1: within the giant archives he sent me, I found some
Speaker 1: extremely unexpected items. Okay, so so far in a you've
Speaker 1: managed to submit your request to a bunch of companies,
Speaker 1: some big, some small. Would you get back well. Shortly
Speaker 1: after I was done with delivery, Facebook sent me an
Speaker 1: automated alert saying my archive was ready for download. Okay,
Speaker 1: I am now unzipping my Facebook folder. Here. Let's have
Speaker 1: a look. What have we got? Okay, this is This
Speaker 1: is quite a large number of folders, twenty six folders here.
Speaker 1: There are folders here titled ads, calls and messages comments.
Speaker 1: This folder gives me eight hundred and eighty sub folders,
Speaker 1: and by the looks of it, it's organized by um
Speaker 1: by friends, so I can see the names of various
Speaker 1: friends of mine. In fact, I can see numerous ex
Speaker 1: girlfriends in here. Let's have a look at this one.
Speaker 1: I'm asking one of my exes in two thousand and
Speaker 1: seven whether she has a Flicker profile. I have no
Speaker 1: idea why I would be doing that. I haven't seen
Speaker 1: her in about twenty years. Nat, I think your wife
Speaker 1: might have some thoughts about this. No, no, no, it's fine.
Speaker 1: I actually invited one of my excess to our wedding,
Speaker 1: so we're all on good terms. Oh, there's a video here.
Speaker 1: This is a This is a video of my younger brother,
Speaker 1: aged about six, dancing around with balloons stuffed up his
Speaker 1: shirt and me in a set of pajamas teasing him
Speaker 1: about it. That is a golden file to have on record.
Speaker 1: I love that. That's so cute. You know it sounds
Speaker 1: like Facebook Major data available in a pretty readable format too. Yeah,
Speaker 1: they did. And actually that's what I found interesting. When
Speaker 1: going through the request process, you can ask it to
Speaker 1: give you data either in a machine readable format, which
Speaker 1: would make it easier for another company to use it,
Speaker 1: or in a human readable format, which makes it easier
Speaker 1: for you and I to go through. And g DPR
Speaker 1: doesn't say that you have to give that kind of option, right, No,
Speaker 1: that's true, And many companies are actually also making these
Speaker 1: tools available to everyone, not just those of us in Europe.
Speaker 1: So you can go and do this yourself now, Aki,
Speaker 1: Although turn Buck says, I've got the best video of
Speaker 1: a relative shoving balloons up his shirt with underpands on
Speaker 1: his head. Blacy. It wasn't long before I had an
Speaker 1: email from Apple saying my data from them was ready
Speaker 1: for download. Apple says it lets you download data about
Speaker 1: the history of your app Store download activity, Apple music streams,
Speaker 1: device information, market subscriptions, or email archives, calendars, and even
Speaker 1: support requests. But I was interested in a category simply
Speaker 1: titled other data. What exactly is other data? This lists
Speaker 1: things like Apple TV call history. That's interesting. This is
Speaker 1: a Comma separated values files. So this is like a
Speaker 1: giant Excel spreadsheet field line after line with raw data. Yeah,
Speaker 1: and inside the file with information I definitely wasn't expecting. Now,
Speaker 1: this is interesting. This is showing me a list of
Speaker 1: what looks like all my recent calls, at least at
Speaker 1: the time I requested the data. This is showing mobile
Speaker 1: phone numbers. It's showing whether they were connected outgoing calls,
Speaker 1: missed calls, connected incoming calls. It's showing me the phone
Speaker 1: numbers as well of whoever it was I was I
Speaker 1: was talking to. There's also a line on some of
Speaker 1: these phone calls. That says answered elsewhere, which I assume
Speaker 1: probably means I answered the phone, but I answered it
Speaker 1: on my iPad or my Mac or possibly even my
Speaker 1: Apple Watch since they all connect to my phone. Um.
Speaker 1: This is a data set that I definitely wouldn't want
Speaker 1: to to get out the because it lists phone numbers,
Speaker 1: it lists the duration in seconds broken down to two
Speaker 1: decimal places, um, and things like that. So that's, uh,
Speaker 1: that's a very interesting file to have. This kind of
Speaker 1: metadata on calls and messages is the kind of detailed
Speaker 1: police officers might request from companies to help them solve
Speaker 1: a crime. Yeah, exactly. And it doesn't contain the content
Speaker 1: of a call, but by knowing the time it took place,
Speaker 1: the phone number of the caller, the length of the conversation,
Speaker 1: even whether the call was answered or missed, it all
Speaker 1: helps build up a picture of an individual's private life.
Speaker 1: This data is obviously of a very sensitive nature, and
Speaker 1: it's one of the reasons companies like Apple and Facebook
Speaker 1: have spent billions of dollars securing their products and cloud services. Well,
Speaker 1: I've just found another folder. Now, this is buried quite
Speaker 1: deep in this directory. It's one, two, three, four, five
Speaker 1: levels deep. Here and it's under stores activity and then
Speaker 1: Apple TV and podcast Information. And here there are two
Speaker 1: files that intrigue me. One is called your Podcasts. This
Speaker 1: is a fairly standard COMMA separated values file that shows
Speaker 1: the podcasts that I'd subscribed to within Apple's podcast app,
Speaker 1: the U r L of the RSS feed, the title UM,
Speaker 1: and a column called last touched on which I'm assuming
Speaker 1: is the last date that I interacted with each of
Speaker 1: these particular shows. But more interestingly, there's another file next
Speaker 1: to it called podcasts play state. And this is a
Speaker 1: gigantic file. So now what's a place state file? Whether
Speaker 1: it contained about twelve thousand entries or more about individual
Speaker 1: podcast episodes I'd listened to using Apple's app, which is
Speaker 1: even more amazing considering that I only use that app
Speaker 1: for a little while, although I do subscribe to a
Speaker 1: lot of podcasts. Maybe this type of data would be
Speaker 1: valuable to the developers of another podcast app to help
Speaker 1: them personalize their services for you too. It is valuable,
Speaker 1: but the trigger party is to get it correctly maps
Speaker 1: to the episodes we have in our system. This is
Speaker 1: Johann Bilgrin, CTO and co founder of a Cast, which
Speaker 1: makes podcasting software and just for honest disclosure, A cast
Speaker 1: hosts my personal tech podcast here in the UK. So
Speaker 1: it's difficult to get the mapping correct and to actually
Speaker 1: be able to port your data from one service to
Speaker 1: an other, you need to get that mapp in correct
Speaker 1: to make it valuable. So it's about so standardization is key.
Speaker 1: It's not just about giving the data. It has to
Speaker 1: be in a in a standard format that that everybody
Speaker 1: is using in the same sort of ecosystem exactly the
Speaker 1: format and the mapping. I would say it's the biggest
Speaker 1: challenges and currently there are there is no standard. Do
Speaker 1: you think a company would ever pay or otherwise incentivize
Speaker 1: you to let them see the data from one of
Speaker 1: their competitors. That's a good question. Uh. You know, we
Speaker 1: see that data is getting more and more valuable, and
Speaker 1: you know people are talking about the new currency is data.
Speaker 1: So that might be the possibility in the future, but
Speaker 1: when it comes to podcasting, I don't believe it's in
Speaker 1: the near future at all. So even with data being
Speaker 1: portable from company to a company, it's not clear that
Speaker 1: businesses are willing to pay for it, not yet. No.
Speaker 1: I think a big part of the problem is that
Speaker 1: companies are giving us our data in commonly used formats,
Speaker 1: but that doesn't necessarily mean it's immediately possible for another
Speaker 1: company to start doing something useful with it. I thought
Speaker 1: maybe there's a market for a third party service that
Speaker 1: could convert data from one company into a format easily
Speaker 1: usable by another. So I went back to Julian Saunders,
Speaker 1: the CEO of Sport, to show him some of the
Speaker 1: data I've got back from these companies and asked him
Speaker 1: whether this could be a huge business opportunity. I'm absolutely
Speaker 1: sure it is, and I think there will be a
Speaker 1: lot of data broker type services that will emerge. But
Speaker 1: of course the real problem with that is that you
Speaker 1: at the bottom end of the market, where maybe five
Speaker 1: pounds a month for your data is is quite a
Speaker 1: good value proposition for those people who are really high
Speaker 1: value marketing targets, that just isn't interesting to them. I
Speaker 1: brought an iPad to show Julian some of the data
Speaker 1: I got back from companies. I took a gamble and
Speaker 1: let him look through the folder containing all of my
Speaker 1: Facebook message history. Well, first of all, I have a
Speaker 1: standard by the number of files here. This is really incredible.
Speaker 1: Let's just pick one out, Emma, let's try and see
Speaker 1: what we've got. Emma's got photos as well. I didn't
Speaker 1: see this. Let's check that out and see how good
Speaker 1: these photos. I know who she is, so it's now
Speaker 1: let's find out. Oh yes, this is Oh yeah, I'll
Speaker 1: have to explain this off the podcast, U no name.
Speaker 1: This sounds pretty risky, yeah, I mean it was ultimately
Speaker 1: less scary than I feared. I suppose what was eye
Speaker 1: opening is just how much information there is in these files.
Speaker 1: And now I have so much of my own data
Speaker 1: in my own possession, I've got a new problem making
Speaker 1: sure I keep it safe. When we take control of
Speaker 1: this kind of data, we become the data controller, not
Speaker 1: just the data subject. We then have full responsibility for
Speaker 1: where that information goes, and it could be used very
Speaker 1: positively if we share it with the right people. So
Speaker 1: you've gone through this whole process for us, I'm wondering,
Speaker 1: what have you learned? What surprised you? I think what
Speaker 1: surprised me is just how different the ways that companies
Speaker 1: are actually approaching this new responsibility they have. You know,
Speaker 1: you can find a fairly big company that's using a
Speaker 1: quite manual method for letting consumers request their data. Um,
Speaker 1: but then you have got the big guys who perhaps
Speaker 1: unsurprisingly have gone all out and said, we're going to
Speaker 1: give you this super fancy click process to to get everything.
Speaker 1: I sort of expected to be a little more automation.
Speaker 1: Oh interesting. Are you excited for this future or consumers
Speaker 1: have more control over the data? I mean this has
Speaker 1: been a pretty controversial regulation. Yeah, I mean I think
Speaker 1: the thing I'm most interested in is the fact that
Speaker 1: data now is it's kind of becoming a new currency,
Speaker 1: and it's only going to become more the case. So
Speaker 1: we're going to see companies, third parties and middleman and
Speaker 1: things actually saying, look, your data is no different to cash.
Speaker 1: You know, when it's in a bank, you know you
Speaker 1: can take it out of a bank, and it's no
Speaker 1: different for a company. Data goes into a company and
Speaker 1: it should be able to come out and be transferred
Speaker 1: to another one too. And that's it for this week's
Speaker 1: episode of Decrypted. Thanks for listening. Have you tried to
Speaker 1: sell order leads your data yet? With to hear about
Speaker 1: your experience, and you can send us a message at
Speaker 1: decrypted at Bloomberg dot net. We'll find me on Twitter,
Speaker 1: I'm at Nate Blankson and I'm at aki Ito seven.
Speaker 1: If you enjoy listening to Decrypted, please recommend us to
Speaker 1: your friends, and if you haven't already, please take a
Speaker 1: moment to rate and review our show. This helps us
Speaker 1: find new listeners. This episode was produced by Pierre Goodkari
Speaker 1: Liz Smith, TOFA Foreheads, and Magnus Hendrickson. Francisca Levi is
Speaker 1: the head of Bloomberg Podcasts. This is the last episode
Speaker 1: of our season and we're now taking a few weeks
Speaker 1: off to work on new episodes. We'll be back again
Speaker 1: in the fall.