hello, this is bbc news, with chris rogers. the headlines: another two cabinet ministers — matt hancock and rory stewart — enter the race to become the new conservative leader and prime minister. a british climber dies on mount everest. robin haynes fisher is the tenth person to die on the mountain this season. president trump arrives injapan for the start of a historic four—day state visit. universities in england are told not

to ‘scaremonger‘ over finances, as a review is expected to call for them to reduce their tuition fees by nearly £2,000 per year. rules allowing homeowners to build some extensions in england without planning permission have been made permanent. now on bbc news, it's time for click. this week... they're still sucking up our information. they're still acting on our data. give me the memory sticks! and there are bits and bytes coming out of everything.

welcome to london's piccadilly circus, one of the busiest junctions in the city, popular with tourists on the way to the world—famous west end theatres. and that's why the biggest brands pay huge money to advertise on those enormous billboards. but why go big when you can go small? 0ur mobile devices nowadays know more about us than we do. this almost unrestricted flow of information is a goldmine for advertisers and other groups who want to target us with their messages. not just about what to buy, but also about what to think, and maybe even how to vote. so, exactly one year ago, new eu legislation came into force. gdpr is designed to stop companies from endlessly collecting and storing our data without us ever knowing. if you live anywhere in europe, these notices appear to let you know that the website you're looking

at is about to collect some data from your device. delve in and you can choose how your information is shared and collected. well, that's how it should work, anyway. but what's bothered me over the past year is just how complicated some sites make it to switch off the data collection. the option to actually opt—out is often obscure, the process of opting out is long and confusing, and even then you might not be able to opt—out completely without going to lots of other websites and individually opting out there too. i don't think many of us really understand the options and, even if we do, come on, how many times could you notjust be bothered and press accept all anyway? do you accept cookies or do you want to reject them, what do you generally do? generally, i would accept them. erm, i accept everything.

sometimes, it doesn't make it very clear, like, very easy, so, yeah, then i just accept. do you know what you are accepting when you do that? absolutely no idea! hmm, i'm not sure gdpr is working as intended, are you? the good news is, this legislation is notjust about restricting how our data is collected, it also gives us the power to ask companies what information they hold on us. so that's exactly what carl miller set out to try to do. i'm on a battle to get my data back. hi there. can i make a subject access request under gdpr, please? a subject access request, did you say? yes, to exercise my right to be informed about all data which is held on me. if you live in the eu, you can use something called a subject access request to ask companies for a copy of your data. all sorts of businesses hold onto our personal information,

from banks to supermarkets to media organisations. the whole process is supposed to be straightforwards. i've gone on their website and it doesn't work! there's no e—mail. now i have an e—mail address. you're supposed to pick your own channel for making these requests. that didn't work, i have to apparently be a member. i'm going to phone them up again because they may well hold information on me. i'm on day one and i'm already overwhelmed. automated operator: this phone service is dedicated to our members only. and these are only the businesses i directly work with. most people don't realise how companies you've never heard of have bucketloads of about you. bucketloads of information about you. every click you make, and maybe not make, may be recorded and shared. this is the business of personal data. theirjob is to scoop up every crumb of information they can get hold of, both from public and private sources, and analyse it to understand me. or, at least, try. 0ne company i got my information

from had drawn data from hundreds of different sources to create thousands of different guesses about what i'll be like as a consumer. and according to one rating, i'm in the top 10% of an indulgence rank, whatever that means. my consumer electronics audience segmentation is young and struggling, apparently, which is probably more right than wrong. it's put me in the top segment of people most likely to gamble online, something i don't think i've ever done. these companies have created a strange digital copy of myself that i don't even recognise, making presumptions i don't necessarily agree with. all the while, i've been thinking i'm getting things for free, so little nuggets of information leaving my life and getting collected by others, it doesn't really matter. but now i'm beginning to feel i'm the product and it is me that people are getting for free. frederike kaltheuner is a data and privacy campaigner, and i sat down with her to talk through my concerns. there are two separate

types of harms. when it's accurate, it's very creepy, and you'll be, like, "why does this company know how much alcohol i consume?" but when it isn't, it can be equally concerning, it can be maybe you're misclassified as something negative and you aren't, but you're not aware that the company... somewhere in some database, someone thinks you're a gambler and there's nothing you can do about it. it's managed to generate thousands of categories, you know, probably themselves derived from other categories in this dataset, all without us actually really volunteering any of this information in the first place, and frankly getting no benefit from it. will i be targeted on the basis of how indulgent i am? yes. when data brokers offer these categories, they offer them because somebody is demanding them. it's a product that they're selling, and all of these categories are categories that marketers, local authorities — whoever they sell data to — want. and all this through my online activity and smartphone, but a lot more data comes from sources we don't

even think about. this is my new vacuum cleaner, the robot i've been dreaming of for many years. and like many other smart devices, to operate it, i first have to download its companion app. i just scanned over the terms and conditions because, otherwise, i'll be here forever. according to one study, it takes 76 days to read all the privacy policies that we come across online. and then the cleaner starts mapping my house, but now i am suspicious and i go to check that it's not hoovering up things i haven't bargained for. i'm off to imperial college. here, researchers have been looking at how internet of things devices, from child—monitoring cameras to light bulbs to smart plugs, can collect and share our data. let's start off with my vacuum cleaner. so, we brought the hoover in our lab and we have realised the hoover is a little bit more than a hoover. we analysed the wi—fi data and we saw that the hoover

is sharing the floor maps with some server in china. s0, your information is not going just to the manufacturer, but also some other support services. based on this privacy policy, the company is entitled to share that with third parties, if it saw a benefit in doing so? yeah, of course. and the worst part is that you cannot start without agreeing with these policies. and it's notjust a vacuum cleaner, this is a monitoring camera meant to keep us secure but, in fact, it's sharing data with 5a partner organisations. collecting data is a common practice for lots of internet—enabled devices — after all, they need it to function properly — but there's very little transparency, so we have no way of knowing how much a device needs itself to work and how much is being given away. sometimes, with these devices, we notice that there's an inverse relationship with the amount of data they collect and their price. so cheaper devices, they are financed, in a way, with your personal data.

so, they're collecting tons of data about you and sending them to tens of servers around the world. it's really strange how actions that you think are really trivial — switching on a light, switching on a smart plug, changing the volume on your tv or, of course, cleaning your floors — can actually be telling so much about you to companies that you are not even aware of. stop tracking me! gdpr says it doesn't matter where the company is based or product is made, you still have the right to your information. but if you don't know who to ask, how can you ask? i spent over a month making requests from 80 companies, and around a dozen have replied. so, this is what it actually looks like to get your data back. i'm probably 100 e—mails deep now and, yesterday, by recorded delivery, this slightly crumpled white envelope turns up at my front doorstep. so, thank you very much, gdpr, i've got my data back now.

and it's in huge quantities. so if i was to print out all the data that i've got, well, this is 1,000 sheets of paper, i would need seven stacks of this if i was to print out all of it. for all its faults, i have no doubt, gdpr is the first step in the right direction, but i fear ultimately, we the users will be the real instigators of change. until we demand it, we are accepting to carry on living in a system that we know precious little about, but that certainly knows a lot about us. that was carl miller, on a very long journey to get his data back. i'm joined by ailidh calendar, also from the human rights organisation privacy international. ailidh, welcome. thanks. it's really hard to opt out because the instructions are not clear. it's really hard to understand, as carl found out, the data that the companies do hold on you, and it's really hard to find out who has the data on you. it seems to me that companies are deliberately making it too hard for us to opt—out.

i mean, that's the key point, you shouldn't be having to opt—out. gdpr's very clear that in most circumstances, it's got to be opt—in. we haven't really seen them taking a proactive stance to make it easy for people. it's in their interest to get our data, and they want to do everything to make that more likely. do you think realistically, it will be us, the consumers, who force these companies to change by voting with our feet? gdpr does provide these provisions to empower individuals, but also to empower them to take action, so they can get civil society to take action on their behalf, but they can also get damages when the way that their data has been used has caused them damage and distress. but one really important thing where governments have fallen short is they haven't fully implemented the provisions that allow civil society to take collective action. and governments also need to look at their own implementation of the law. the law across the eu required extra legislation, as well as gdpr, to implement it, and some countries

still haven't done that. and in countries where they have, they've included loopholes. for example, loopholes for political parties, or in the uk, an immigration exemption, and these need to be reviewed and reined in. how can they include loopholes for political parties, in light of the cambridge analytica and facebook scandal? political campaigns, as we know, are becoming more data driven by the day, and using data from a vast variety of sources, different types of data about us that we might not know, reveal something about our political leanings, and that's why it's really important that data protection authorities, the electoral commission and civil society look at this issue. what do you think the chances are that the politicians will vote to curtail their chances of winning the next election by stopping their own parties from having access to data? what we've seen is that there is a consultation and a code of practice, exactly how political

campaigns can use our data. there are small steps that individuals can take but it is, as you say, difficult. things like minimising the targeted ads you see by looking at the privacy settings on the different platforms you've used, and privacy international has made guides on how to do this within the different platforms. you can ask different actors for your data and use your data rights. you can question political parties about the use of their data. ailidh, thanks so much for your time. thanks very much. hello, and welcome to the week in tech. it was the week that... lawmakers in the us proposed a bill to make texting while crossing the street illegal. under the proposed law, transgressors in new york could be fined between $25 and $250. meanwhile, in the uk, police in south wales faced a legal challenge over the use of facial recognition on privacy grounds. controversy around chinese tech firm huawei continues to grow.

google restricted access to its android operating system after the us government added huawei to a list of companies that american firms cannot trade with without a licence. uncertainty over the compa ny‘s phones led to uk networks vodafone and ee to stop selling huawei handsets. and the us government has issued an alert warning that chinese—made drones could pose a cyber espionage risk to american businesses and other organisations. though the warning does not refer to a specific company, it said that those using the drones for tasks related to national security and critical infrastructure were most at risk. photo—sharing site instagram says it's trying to find out how contact details of almost 50 million of its users were stored online in an unguarded database. facebook, which owns the service, said the leak was traced to a mumbai—based company and was investigating. a report by the united nations has claimed that female voice assistants are fuelling damaging gender stereotypes. titled ‘i'd blush if i could', the report calls on companies

to make devices such as the amazon echo and google home sound gender neutral. we're on our way to an experience that hopes to make us think about how our data is being used. we've been instructed to go to a pub near london bridge, where we're delivered a message. "we need you, sarah needs you. keep your phone to hand and await further instructions. josh." text message alert i've got a text message. "meet me here in five minutes under the green leafy hut thing." recollection is a piece of immersive theatre that uses your data, the same sort of information advertisers easily get their hands on, to take you on a somewhat uncomfortable journey. 0k, stay close, let's move. stay close. are you sarah? yes. do you know josh? yes.

we're told about a secret mind—shifting experience, where we give up our memories. memory deletion, basically. and you don't remember because it's a procedure you had done. this is the first step towards me piecing my mind back together. i went behind the scenes with one of the creators to learn what is actually going on here. we get sent their name and e—mail from our ticketing provider. we can run a data enrichment on that person. it will start to pull out things like related people, things like any social media accounts. so, we've got my twitter in here, my personal e—mail address, my github — anything that could be relevant, even if we don't exactly know how it is relevant. from that point, we can then start curating the imagery that makes sense within the show. i'm looking for the dossier they collated on you. as the show unfolds, tension builds, until the big reveal. the dossier on you, concocted from your online life.

i have no idea what we're going to find in these files. what is this? wow, my old boss from years ago! i'm really careful about not putting anything personal online, yet still, what they found surprised me. is this really the sort of information that companies would be holding on me? er, sort of. there's a couple of things going on here. the first is that, we're a theatre company, not a sales organization or marketing organisation. so while we have access to the same types of stuff, we're going to use things differently. my first thought was that if you put my name into a search engine, you would find far more relevant and meaningful information than the pictures that are here. that's true but, at the same time, you would also kind of know where that came from and it would lose a little bit of mystery when it comes to the storyline of recollection, which is about memories that you have intentionally had removed from your past.

take the memory stick out. delete the information in the cells. memory stick out, log out. information in the cells. get rid of it all. the things i do not recognise in these images, the people or places, they are deliberately there as things i don't know and it gives you a bit of leeway as well? yeah, they might be deliberately there. also, when we find imagery and stuff that's relevant to you, we don't really know how it's relevant to you and, in fact, if it is at all. alarm sounds 0k, everybody out, now. we need to go. 0k. why did you want to put people's data centre—stage? as a company, the idea of taking the customised experience that people get online and giving them an off—line experience that's just as tailored to them is something that we're interested in doing and that's what our platform does. as far as recollection goes, gpr was a year ago, still nobody understands what it is, even people that are in the technology. in the technology world. and we just try to use our position as a blend of a theatre company

and a technology company to demystify it a little bit for people. give me the memory sticks! because if i don't have them, then he will. screaming it has been a pretty intense experience, but the thing that it has really left me with is that i want to hold on to my data. the show has really stuck with me yet, a few weeks on, has my behaviour changed? of course not. i really want my online life to be easy, so i'm handing over my data left, right and centre — but maybe i'm just yet to be struck by what that means in the real world. and that's the problem, isn't it? if it makes it easier to use, we will continue to give our data away, won't we? i mean, in all honesty, i don't know how to stay private and use technology in a meaningful way. now, did you know that there are a whole host of effects artists working across instagram, of all places?

well, we went to visit one in modena, in italy — home of balsamic vinegar and ferrari, amongst others — to find out why. my name is simone vezzani. i'm a 3d—artist based in italy, and i publish content for social media. if somebody thinks that what i do is real, for me, this means that i did a good job.

i choose instagram because it's full of people that they are just watching and get amazed at what they see. # i don't want to set the world on fire...#. i start to record footage about my own life, my travel, my trips, my visits, museum visits, for example. and i start to mix them with digital content. the platform for this kind of content, instagram, was perfect because people are not used to see and to watch this kind of media content in this platform.

when i was younger, i was really obsessed about video games. suddenly, i grew up and i realised that for living, i have to work somehow. i find this kind of software, and this 3d software in particular for me is another way to see these video games, because inside this kind of software, i can manipulate and create everything i want. the most important thing in this kind of work is the lighting and, of course, the model and texture and the shape you create. but if the light inside the effect, inside the 3d scene, does not match and does not fit perfectly with the real world,

the result would be fake. the best thing is when i, for example, create my content, i shoot the video, i create the video, and after that, i stop the record and i take a 360—panoramic shoot from the area because in that way, i have the source of light and i have something like a dome where i can put inside my scene. and in this way, the light is exactly the same as the real world. i usually spend something like one, two, maybe three weeks working on one single video, because i'm alone and i have to take care of every single aspect. i don't consider myself as an artist. i'm really happy when someone

told me that i'm an artist, i'm a surrealist or something like that, but i'm simply a guy who likes to play with computer and experiment new techniques, new styles, new way to see the world. the rather talented simone vezzani, finishing off this week's click. don't forget that we live on social media — facebook, instagram, youtube and twitter. if you'd like to hearfrom us throughout the week or get in touch, that's how you do it. thanks for watching and we'll see you soon. hello, the weather changes are under way this bank holiday weekend. some of us have started it with warm

sunshine. 0thers of us have started it with warm sunshine. others may have seen more cloud. some of us have had a bit of rain as well, a sign of things to come. an atlantic weather system is moving in, where we see most of the sunshine earlier today and weather cloud has been spilling in from the atla ntic cloud has been spilling in from the atlantic with a bit of rain around. still some of that rain into the evening and overnight as well, particularly in scotland. some heavier best developing here, wettest towards the west and north west. northern ireland sees outbreaks of rain overnight pushing on towards western parts of england and wales later into the rain —— remain straight are essential and eastern england with clear spells and mistand eastern england with clear spells and mist and fog patches. temperatures are staying up, miles and eight going into sunday morning. a wet start in scotland, although the heavy rain will ease for many, still outbreaks of rain in northern scotland. showery rain spreading further south in england and wales, not much rain reaching southern england, which is weakening and

moving south. elsewhere, drier, brighter, sunny spells, cooler and fresher. still some spots towards the south east, into the low 20s. single figures in the rain in northern scotland. another cool and wet day on bank holiday monday here. elsewhere, some chain around, cloud building, showers break out, some heavy ones across the western side of the uk. arrows indicating the breeze, some showers spread further east during the day, but not many at all east during the day, but not many at a ll towards east during the day, but not many at all towards the east and south east. but starting the weekend into the low 20s and into the high teens in the woman spots. looking at the picture into tuesday, it feels much cooler and fresher, because the wind is switching to another way. a lot of dry weather around, but building cloud brings the chance of catching showers and temperatures for many a bit below average for the time of year. so entering a spell of cooler and more unsettled weather for the rest of the weekend. temperatures gradually coming down, the breeze picks up. some rain around. maybe

not —— not as much as you would like a cross not —— not as much as you would like a cross gardens in the southern parts of the uk. into next weekend, and by next weekend, high pressure building from the south as it starts to turn warmer once again.

this is bbc news, i'm chris rogers. the headlines at 4.00: the race to become the new conservative leader and prime minister is under way — matt hancock is the latest to enter the contest. delivering brexit is absolutely mission—critical and it must be done and done as soon as possible and it has to be done in this parliament. a british climber dies on mount everest. robin haynes fisher is the tenth person to die on the mountain this season. president trump is injapan for the start of a historic four—day state visit. universities in england are told not to "scaremonger" over finances as a review is expected to call for them to reduce