that was lara and that is gdpr all wrapped up. friday onwards. don't forget, if you get in touch with us on facebook and on twitter too. we live at @bbcclick. thanks for watching and we'll see you soon. some glorious sunshine again today across england and wales. cloudy skies in scotland and northern ireland. a week weather fronts moving in. also seeing a bit of rain. cloud pushing into northern england and wales. ahead of the weather fronts, england and wales. ahead of the weatherfronts, sunshine england and wales. ahead of the weather fronts, sunshine but england and wales. ahead of the weatherfronts, sunshine but some sports along the north sea coasts, english channel coast will have misty and low cloud. from east sussex earlier today, an example. cool compared with the sunshine inland. 0vernight, low cloud pushing in across parts of eastern england to give a cool night and to start monday. 0vernight, rain gets heavier and more widespread and northern ireland. 0n the way to north—west scotland, question as northern isles as wel

that was lara and that is gdpr all wrapped up.ith the world‘s eyes fixed on the uk on saturday, the weather certainly came up trumps. you and i know it is not always like this. but through this coming week, there will be more warmth and sunshine to enjoy but a few exceptions. those exceptions will be mainly today across parts of scotland and northern ireland. the weather front edging in, bringing breezy and cloudy conditions and occasional rain. there will be mist and low cloud in east anglia and the south—east. here, the coolest of the weather. three or four degrees in the countryside to start the day. the mist and low cloud in the south—east will break up and burn back to the coast through the day but we will stick with the cloud across western scotland and northern ireland, particularly with outbreaks of rain. sunshine a bit hazy across northern and western areas. for the south, blue skies away from the coast. there could be some patches of mist and sea fog through the english channel. inland, light winds, could be a degree war

but will these must be enough under the new gdpr? tweaking privity options gives us more gdpr?ore choice, but will all browsers need to go further? —— privacy. these options are offered by other companies as were. they're often difficult to find. how many people do actually use the don't track? it is a good percentage and it has been increasing quite a bit. is it majority or minority. it is a minority but it has grown.|j is it majority or minority. it is a minority but it has grown. i am taking from that not many people switch these privacy features on. they don't. i asked for clarification on a minority of users. and they say a low percentage. that is not good then.|j am assuming that under gdpr is to make sure they are turned on by default. the regulations as high privacy by default. it was a that is where we are going by this. but they also use cookies that live outside the browser to personalise the browsing experience. can't we personalise that? you remember the personalising hack i did with ryan, the interesting thing then it was that most of that information is unencrypt

now, gdpr put in place a called privacy by design.number of elements underneath it that the u.s. companies need to take seriously. emily: right. so as companies go through this, what are the biggest pain points, which is that, now that you have done it? doug: taking user rights seriously and making sure disclosures to users meet not just a letter, but fully, letter and spirit of the law. that will be paramount to compliance. and regulators have been clear that they want to make sure that those notices that you the users get are explicit and granular. one concern the regulators have, is in the european union people are used to clicking through the banners, but there is a concern that users may not take full advantage of all the information be made available to them. so consent is a big topic. data security is another one. that happened in the background, but that a notification rules under gdpr, 72 hour notice, that were required companies to have monitoring measures in place so they can detect a breach if it occurs. simply complying w

that was lara and that is gdpr all wrapped up.nshine in the forecast for the next few days. it‘ll feel warm in the sunshine as well. but it‘s not quite that simple, because in southern areas, particularly, there is a risk of thundery showers. we will see some of those during the day on thursday, courtesy of this little weather front that‘s been sneaking its way in from the near continent. it doesn‘t look like much, but it introduces that extra kick of energy and moisture that the atmosphere needs to generate some of the showers and storms. they will be quite hit and miss, but they will drift westwards during the day. for eastern scotland in north—east england, mist and fog to start off, but this will burn its way back to the coast, things brightening up as the day goes on. here is how it looks on a high—resolution weather model. a bit more detail across wales, parts of england, as well. showers and thunderstorms drifting westwards. it should dry up for much through the day. long spells of sunshine in northern england and scotland,

but have businesses done enough to prepare for gdpr?uggling british retail hardware chain homebase has been sold by its australian owner for little more than a dollar. the markets in europe all in green. and we look back on another week of big busiuness stories. including mark zuckerberg being grilled by the eu parliament over the data scandal. and with the new eu data protection rules coming into force today — gdpr — we want to know is your business being affected? or, as a consumer, are you delighted to possibly not be receiving so many emails? let us know, just use the hashtag bbcbizlive. hello and welcome to business live. (pres+sting) we start with four letters that — from today — will transform the way companies do business in europe. gdpr — or general data protection regulation — is the biggest shake—up of privacy laws since the birth of the internet. it gives people across the european union control over their own personal data — and could mean huge fines for organisations that misuse it. you have probably had a lot of e—mails l

we are celebrating this week gdpr, but i do want to mention that gdpr in my view, is not something thatwill impact entirely on your business model, and i think you know this. e-privacy is essential also. and there's a reason i mention e-privacy, because there is a regulatory framework here, and i want to mention something very obvious. you're not in a congressional hearing. you've come to the european union, and there is a big difference. and the difference mentioned by some of my colleagues, i want to make very explicit, and that is, we are here in terms of regulation, and the united states is here. and this gap is very obvious. it's obvious in adequacy agreements, it's obvious in the day-to-day transactions we have between the continents. but for you, it's a real detailed question of how you will comply. now, i know you will say, of course we're going to comply with gdpr, but it's a much bigger task than i think people are estimating. and no doubt, there will be something said about that in a moment. in your introduction, you spoke i think eloquently about what you thought was one of

it might well be there for gdpr.aroline: we talked but the opportunities and challenges, there's one still out there and, the 72 hour. suddenly, potentially a breach. how on earth do they go about talking to regulators about that? >> is a really difficult area for businesses. many businesses can have breaches with no knowledge of that. particularly smaller businesses. is putting a lot of onus on the security of businesses of all sizes. medium-size businesses struggle to have the adequate resources. to be aware of when they are breached and to be able to react quickly will be extremely tough. >> i do agree with that appeared 72 hours is a hugely short. of time. most people if they suffer from a crisis need at least a week or two to run some of the on six -- some of the forensics. what they do is think about how to plan for that. what will they do on day one? how do they escalate and have a show -- that things could happen to good people. there is death no one is going to be completely safe from cyberattack and busines

gdpr stands for general data protection regulation.s a huge new law that applies to all eu countries, but even companies in the us or china have to follow the new rules if dealing with eu citizens. gdpr spells out how companies can get our consent to use our personal information. a request for consent can't be buried under pages and pages of terms and conditions, it has to be clearly distinguishable from other matters. pre— ticked boxes can no longer be used to indicate consent. and making someone hand over more personal information in exchange for extra features or a proven service is also not allowed, because that doesn't count as freely given consent. the law gives all eu citizens the right to access and erasure. at any erasure. atany time erasure. at any time you can ask a company for a copy of your personal information and they'll have to comply within a month. you can tell a company to correct any data that is wrong, or ask a company to delete any personal data it holds about you and they'll have to have a good reason not to do s

we're celebrating this week gdpr. but i want to mention gdpr in my view will not impact your business model i think you know this. e privacy is essential also. and there's a reason i mention e privacy. it's because there's a regulatory frame work here. i want to mention something very obvious. you're not in the congressional hearing you've come to the european union. there's a big difference. the difference i want to make very explicit. that is that we are here in terms of regulation, and the united states is here. and this gap is very obvious. it's obvious that the adequacy agreement. it's obvious in the day-to-day transactions we have between the continents for you it is a real detail question of how you will comply. i know you're going to say of course you will comply with gdpr but it's a much bigger task than i think people are estimating. and we'll say something about that in a moment. now in your introduction you spoke quite eloquently on what you thought was one of the key points which is the app question. and

in one sentence, defined gdpr, we all failed. shall we move on?d like to talk about the coat of arms for meghan. to double within 20 yea rs arms for meghan. to double within 20 years according to the independent, in 2035 they say it close to 5 million people will be diagnosed as morbidly obese. everybody is trying to live more healthy. i think i've read this before, but you come up with these studies, and your brain just turns off a little bit. i have disturbed the sunday times. we know it's a big problem. iwould disturbed the sunday times. we know it's a big problem. i would like to hear more solutions. and i think if imight get hear more solutions. and i think if i might get a minority, i was a big supporter to what he was doing time because i think jamie supporter to what he was doing time because i thinkjamie oliver was taking a stand on things that might be quite quite a blunt, but it was just trying to do something about it. and there'sjust so many pugh is saying, you're encouraging him liberties, —— encouraging on liberties, —— encouraging

we were saying this morning you should be able to shout gdpr.] alastair: the main thing you can do is the button on the top, that will switch it off. we double checked that this morning. if you switch it off, even the wake word will not turn it back on. emily: but that is fully turning it off. what about keeping it on and having some sort of thing where you can all doubt -- you can opt out? dan: you're not fully turning it off by pressing the button. it has microphones and speakers. pressing the button tells the software and the device to stop recording, that the software might decide to ignore the button. these are network attached computers with all of the problems those have. they could be buggy, they could make mistakes. even to the point where we think the system is physically turned off, the microphone is still probably physically active. other technology companies starting to build devices -- in featured bthe opt of use you? -- appease you? alastair: for me, definitely not -- dan: for me, definitely not. they are listening over time it co

henry says gdpr is a fantastic move forward towards avoiding the possibility of dystopian society asepicted in 0 rwell‘s dystopian society as depicted in 0rwell‘s 1984. another of usa's quality assurance

gdpr is a new european law that comes into effect today.ions for any company doing business with anyone living europe. the emile cilliers affects the big internet players in the us, but also smaller organisations and aims to protect personal data. at its heart, it requires everyone to design data protection into their offer excellent privacy settings set too high by default. heard this before? all calls are recorded for training and security purposes. that may not be adequate under the gdpr which state you must actively give your consent rather than it be assumed and you can withdraw their consent at any time. so in this case, the company needs to wipe that call recording if you ask them to. eu citizens get the right to access their personal data and find out who their personal data and find out who the company has shared it with. and how they got it in the first place. if it was acquired in a dodgy way, you can ask the company to delete it as well as any data which affect yourfundamental as well as any data which affect your fundamental ri

how clear are you about what gdpr is? not at all. gdpr? what's that? i've no idea.rs much more control over their data. they can now expect to be told who their data has been shared with, they can opt out of profiling and they can challenge automated decisions about issues such as whether or not they should be offered a loan. beyond that, consumers can now demand free access to data about them held by a company within a month. but for many businesses, even small ones like this aquatics firm near birmingham, complying with gdpr is onerous. all firms must now appoint a data protection officer, seek explicit consent, and allow customers to delete, inspect and correct records. many think their mailing lists are now redundant. in today's busy society, i'm exactly the same, you get bombarded with e—mails, and i can quite easily see that mailing list shrinking from 3,500 to less than 1,000, which we then got to build back up again. i think that message has been lost, to some extent... 0ne leading lawyer says many of the e—mails sent in the past week weren't needed. a lot o

gdpr, what is that exactly? gdpr gives consumers much more control over their data. they can challenge automated decisions about issues such as whether or not they should be offered a loan. and beyond that, consumers can now demand free access to data about them held by a company within a month. but for many businesses, even small ones like this aquatics firm near birmingham, complying with gdpr is onerous. all firms must now appoint a data protection officer, seek explicit consent, and allow customers to delete, inspect and correct records. many think their mailing lists are now redundant. in today's busy society i'm exactly the same. you get bombarded with e—mails and i can quite easily see that mailing list shrinking from 3500 down to less than 1000, which we've then got to build back up again. i think that message has been lost to some extent. 0ne leading lawyer says many of the e—mails sent in the past week weren't needed. a lot of individuals are being bombarded by e—mails. are these e—mails actually necessary? in many cases they're not necessary. there is a ru

do you have enough resources to actually enforce gdpr? we certainly do.here to protect their rights and get the message out to organisations that they need to abide by the laws which aren't meant to punish them by any means, they're actually there to help them strengthen their credibility with the public. we deal with an awful lot of cases, full stop. our staff has increased by about 70, 80 people in the last 6—12 months. we're getting ready to recruit another 170 people over a similar sort of period. we know there's going to be more complaints. what kind of approach are you going to take to enforcing and punishing? the ico's always been pragmatic. the commission is always very much of the opinion that encouragement and education is the better way to go. we would much rather use the carrot than the stick. as for this talk of big fines, it's nonsense. that's not what the ico is about. that's not the way we want to work. those types of sanctions will be for the most wilful, deliberate, and continuous companies that flout the laws and regulations. do you thi

what's gdpr?s general data protection regulation that goes into force the 25th of may one week from now. it aims to give back control over individual data to the individuals. so it limits the amount of data that organizations are allowed to store >> 85% of companies are not prepared, won't be ready for the launch why is that? because they're not taking this seriously? or they have not had enough time to prepare >> there's many reasons for tha that >> first, it's a complex regulation 260 pages of text. 99 articles. it has a wide scope. second, there is big technological challenge. to give one example, to be compliant organizations need to be aware what kind -- what pern personal data they have in systems. if you take a bank, you may have a bank account, multiple bank accounts, shared bank accounts, you may have a mortgage, there may be e-mail conversations between you and the bank that's all considered to be personal data. organizations need to be in control and understand all those files, report o

joumanna bercetche sat down with the european commissioner of digital single market and asked if gdprust the beginning of further regulation. >> we go on with e-privacy regulation today we have e-privacy directive, but this directive was implemented in member states differently. once again we would like to harmonize our approach that's why we proposed this e-privacy regulation proposal, which will be directly amr applicab applicable 92% of european citizens, they said that they would like to be absolutely sure that confidentiality of communication will be protected also, will be current, when they are using platforms. so our aim is to create a level playing field. our aim is to protect everybody's privacy. our aim is to protect confidentiality of communication, whatever means of communication people are using >> europe has been at the forefront in terms of using this regulation, europe are leading with gdpr which could be a new template for the rest of the world. do you think that because of that europe is placing itself in a disadvantage versus the rest of the world because tech comp

gdpr gives consumers much more control over their data.pect to be told who their data has been shared with. they can out of profiling and they can challenge automated decisions about issues such as whether or not they should be offered a loan. and beyond that, consumers can now demand free access to data about them held by a company within a month. but for many businesses, even small ones like this are critics firmly birmingham, complying with gdpr is odorous. all firms must now appoint a data protection officer, the explicit consent and allow customers to delete, inspect records. many think their mailing lists are now redundant. in today's busy society, i'm exactly the same, you get bombarded with e—mails and i can quite clearly see that mailing list shrinking from 3000 to less than a thousand which we have to build up again. one leading lawyer says many of the e—mails are sent in the past week weren't needed. a lot of individuals are being bombarded by e—mails, these e—mails actually necessary? in many cases, knows. desarrollo if you're

emily: we are just days away from gdpr going into effect.ow will we really know if facebook and other companies are complying? amb. o'sullivan: well, the answer is that the rules are there. it would be eventually for people who feel that their data is not being properly protected to make a complaint, or for somebody to introduce a complaint to one of the data-protection authorities, then there would be an examination. the company would be given the opportunity to respond. if i may say so, emily, you talked about these fines. a fine will be the instrument of last resort at the end of a process in which companies have been asked to explain whether they're compliant, whether they are not compliant, why they are not compliant. i don't think there is any risk that companies will find themselves suddenly out of the blue subject to heavy fines without there being due process and time given to respond to any concerns there may be. emily: on this note, you have made the argument that companies could actually be more innovative as a result of gdpr, bu

we saw couple of things when gdpr went into effect. a lot of european marketers stop spending on automated advertising. they were a little nervous these new rules where every single company, dozens of company along this for supply thing, you digital ads online and require consent. a lot of them pulled back and said we know google is compliant and they have enough money and lawyers, we will spend with google because we are more comfortable. there are companies claiming they are going to shift more dollars in that direction. it demonstrates year the concerned that these companies have that google is very powerful in this market. emily: you said one of them that says anybody that says gdpr is a good thing is it a monopoly or a liar. >> a lot of companies did not know what the future holds. emily: caroline, what are you seeing an your side. some u.s. publications are avoiding running ads at all right now and some of them, are still unavailable. >> in some ways, it is frustrating. i was a loyal reader of the l.a. times, i still cannot acces

the gdpr gives consumers additional rights and control over their data. for example, you need to have consent now to have that information. you need to inform companies you're using it or storing it. consumers have the right to withdraw that consent or else to request it be deleted. there's kind big fines for this. >> 4% of global revenue. >> the big thing for companies, the advice is it's happening. it's coming in next week. so to be prepared and be as prepared as possible. that means having -- being familiar with what the obligations are are around collecting data, around having consent and also to have the right processes and steps in place to manage that process. >> the timing is interesting with everything going on with facebook now. under these rules, could a cambridge analytica-like scenario have occurred? >> who knows. >> anything can happen. >> i think what we're seeing, it's been in the press a lot and coverage a lot and technology companies are certainly being challenged to be more transparent with how they manage personal data. certainly i thi

how clear are you about what gdpr is? i'm not at all. gdpr? what is that? i've no idea.n demand free access to data about them held by a company within a month. for many businesses, including small ones like this, complying with gdpr is owner is. all firms must appoint a data protection officer. seek consent. and allow customers to seek and correct records. many think their mailing list are now redundant. you get bombarded with e—mails. i'm exactly the same. i can quite easily see that mailing list sinking down. we spend got to build it back up again. one leading lawyer says some of the e—mail sent in the last week were not needed. a lot of individuals are being bombarded by these e—mails. are they necessary? in many cases, no. there is a rule if you are sending unsolicited marketing to an individual by text or e—mail you need permission. marketing to an individual by text or e—mailyou need permission. but many individuals would have already given consent. and businesses can rely on something called the soft t rely on something called the soft opt in, which means they ca

gdpr is in effect.i do not think this onslaught of e—mails over the last few months is companies deciding two years ago we will leave it until the last minute, i think they were caught off—guard like everybody else. which areas are particularly affected ? like everybody else. which areas are particularly affected? some are specifically called out, certain types of sensitive data, medical information being very obvious, information being very obvious, information about sexuality, religion, political views. they are called out in the legislation as requiring precise care and careful controls, meaning companies working in those areas like medicine, health care, they are really having to try hard. similarly political parties have found they have lost millions of e—mails from a database because it is certainly sensitive information and they need much more explicit consent to keep this and they have not got it. then it is also businesses which require on shaky consent in general. some american companies have

lawmakers just copy and paste gdpr here. that would surprise a lot of investors and consumers, i would think. we should also note the fight isn't exactly over in the eu as well. we have seen well-known privacy activists in europe who got right to work i filing complaints against big tech this idea of forced consent, the idea you aren't giving user a true free choice but big tech is already pushing back against that. facebook has already said listen we have done the work we are meeting the requirements of gdpr as stated, our policies are clear our settings and tools are better but it's probably not the last complaint they are going to field from the, u. >> josh lipton with cnbc. >>> remember that enormous financial disclosure the president released last week? turns out it included a mysterious corporation that brought in more than $100,000. no one at the trump organization wanted to talk to them about what that business could be. now we know the reporter who broke that story joins us next. we came here for the friends. and we

of research into the software to make a gdpr compliant. kick up the bum to do it, so it is not all bad. now many firms have been worried about the cost of getting it wrong — but the information commissioner has stressed she's not expecting perfection from small businesses from day one. jane. cricket now and england needed a good morning session after their disastrous first day against pakistan at lords. well, the visitors continued to dominate. at lunch they were 136—3, just 48 behind. our sports correspondentjoe wilson has been watching the action. at lord's, english expectations can feel like blades of grass, cut back, oi’ feel like blades of grass, cut back, or even flattened. the second day's play of this test match began with a distinct chill in the air as some supporters wondered if this english summer would just be a continuation of the barren test match winter. only wickets would lift the spirits. against this pakistan team, growing in confidence by the boundary, well, that was not easy. azhar ali and how mr hale were enjoying them

gdpr stands for general data protection legislation and it applies to all eu countries, but even the. a request for consent cannot be buried under pages of terms and conditions, it has to be clearly distinguishable from other matters. pre—ticked boxes can no longer be used to indicate consent. making someone hand over more personal information in exchange for extra features or a premium service is not allowed because it does not count as freely given consent. the law gives all citizens the right to access and erasure. you can ask a company for a copy of your personal information and they will have to comply within a month. you can tell a company to correct any data that is wrong or ask a company to delete any data and they will have to have a good reason not to do so. it also requires companies to keep our data safe to stop it from being stolen. if there is a breach, companies must inform their national regulator within 72 hours where possible. there are penalties for companies that do not comply. the maximum fine is 20 million euros, or 4% of a company's global turnover, whichever i

. >> on the 25th of may the world vell change, with gdpr, we will ha to operate recognizing that privacy is a human right a glee the company under fire after an echo speaker reportedly call reporting and sharing a family's private conversation and sending it to a random person, an employee of it is husband. jean, talking about, i guess, the implications for the companies that are dealing so much in a.i., so much in data we say when we ask directly, alexa just went off on her own behalf what she thought she heard a years ago there were about 14 million of these devices, about 17 million today it's likely happened other times, so it's pretty infrequent. the concept that they're still struggling to understand now, we test they devices. they can understand in a quiet room if a person is speaking to it almost 100% of the time more recently we did a test, and it got 997 out of 1,000. the problem with can ambient noise and conversations with more people, then the comprehension dips this is a great example of where it's at, and we're not there yesterday. >> it's an open microphone in your house,

what exactly is gdpr?one is on the same page. it has a further scope because even companies outside the eu in china and the us will have to follow the new rules if they are offering their services within the eu and it gives us new rights such as a ccess eu and it gives us new rights such as access and erasure so you can go toa as access and erasure so you can go to a big company and say you want a copy of all of your information and they have to give it to you and if you are not happy for them to have it so as as consumers it is good news. annabel, these companies want to maintaina news. annabel, these companies want to maintain a relationship with us evenif to maintain a relationship with us even if we ordered something from them ten years ago. even if we never did, looking at my inbox. i have e—mails from people we never have done business with. it is for two reasons. one is that the rules on consent are changing and people used to steal your information and put you on a mailing list and e—mail you stuff

emily: we are just days away from gdpr going into effect.ill we really know if they pass -- if facebook and other companies are complying? david: the rules are there. it would be eventually for people that feel that their data being properly protected, it would be for them to introduce a complaint to one of the data protection authorities, then there would be an examination, the company would be given the opportunity to respond. you talked about these fines. a fine will be the instrument of last resort at the end of a process in which companies have been asked to explain whether they are compliant, whether they are not compliant why they are , not compliant. i don't think there is any risk companies will suddenly find themselves subject to heavy fines without there being due process and time given to respond to any concerns there may be. emily: on this note, you have made the argument that companies could actually be more innovative as a result of gdpr, but there are also small businesses who say they have been put out of business as a resul

today the e general data protection rexes, the gdpr, in the eurozone went into effect in europe.pean union must obtain users' consent to use or sell any personal information. so this means they won't be able to make money off it until people for sure say, fine, go ahead. my next guest says u.s. companies better comply or get crushed, he's a data previous expert who represents fortune 500 companies in lawsuits that focus on tech and intellectual property and privacy. you must be busy lately. >> for the last two years, it's really within nonstop. the last six months has been absolutely crazy as companies in the u.s. with operations in europe try to become compliant. remember, we're talking about a law that has 99 articles, it's over 200 pages long, it's very complex. liz: okay. already, it has only been a few hours -- longer in europe, obviously, because they're five hours ahead mostly -- but we now have facebook and google already facing something like 8.8 billion in fines? >> yeah. they're not fines. what's happened is the self-styled privacy advocate max. shrem who has filedded

this week sees the start of gdpr, the eu's new, stricter data legislation, which may mean that toolsonger be legal. we were looking at public people in a public environment where they are expecting to be recognised, which gives us implied consent. in a post—gdpr world you need exposing consent, which means that if we wanted to run this thing in the future we would have to contact people and say this is what we are doing in a particular environment. we would consider that if we go forward with this project, or we may consider to do alternative things with this type of technology. just this week amazon found itself in hot water after it was found that they had been marketing recognition systems to law enforcement agencies in america. as technology like this because more accurate and widely used, we could all be as recognisable as the royal family. that was steve and his bunting. inevitably, kids today are growing up surrounded by technology, and there are pros and cons to that. but the issue is that grown—ups are still learning how to handle it. i can see you eager beavers are ready to

but beyond that, what additional rights am i going to get >> gdpr, general data protection regulations a sweeping rules going into place across europe the idea is to give you more rights on your personal data this is a law that is trying to harmonize data privacy across the entire eu. some countries have strict law necessary place, others don't. this is trying to create a framework so that it's consistent besides the right to know what companies have on you, you also have a right to be forgotten what that means is your data can be erased. you can say to a company, i want you to forget about me and they have to comply with that if they aren't able to comply, there are some pretty serious fines. we're talking 20 million euros or up to 4% of global annual turnover so those are make or break numbers. >> are we expecting consumers to be more hands on in terms of how they think about data privacy in the future >> so surveys have shown that cob assumers do mra plan to take advantage of these new rules they are going to request what information a company has about them i think over half of co

and in the gepr question, the problem we have with gdpr, we don't know which gdpr it is. we had a series of letters come out of the article 29 working party that radically changed most interpretations of gdpr. so, on gdpr writ large, i think that there's still a lot to be seen. what does it mean. how do we implement it. my members are taking it seriously. we have a whole series of blogs on how do small businesses comply with it. you may have missed my earlier testimony. what is worth noting is every single one of my members, the one man shops to the largest, they are part of the global economy. we are taking gdpr seriously. but we don't know what it means in all places yet. sen. blumenthal: we may not be sure of what it means in all places, but we know about the general principle. minimizing data. providing for consent. enabling transparency. consumers should know which data should be collected. there are basic principles here that they are nowhere near adopting right? mr. reed: it is great it is coming from you with your legal background. one of the problems we have are

given gdpr is already going into effect, and the e.u. has taken a stronger line on google, for example, the massive fine over the shopping service and a big tax penalty for apple and a fine for facebook about how it handled whatsapp. what are we really look at? sarah: the antitrust issues are really interesting, whether they should be ever to own instagram and whatsapp. gdpr is one thing. whether that law is strictly enforced for facebook is another thing. zuckerberg needs to show that he is making a good-faith effort to really keep the best interest of european users at heart, but if there is anything in facebook's actions that really illustrates otherwise, and they can take stronger action than maybe the company is expecting, for example the stc policy in the united states was in effect for years, but it was never really enforced. in many cases is not just the law that matters, but how strictly it is implemented. emily: go on, scott, 30 seconds. scott: i think sarah is absolutely right. at this point, if i was zuckerberg, i would be mo

josh lipton explains >> it's billed as the biggest change in data privacy regulation in 20 years gdprral data protection regulation now after years of lobbying and discussion, the new law takes effect across the eu starting today. what exactly is gdpr it's a new set of rules that will give eu citizens more control over their personal data they'll be able to access data stored by companies and find out where and from for what purposes it's being used. they'll have the right to be forgotten, meaning they can have their data erased. they can take their data and transfer it to a different provider companies like alphabet and facebook store okays okay s o data the concern for investors is these new rules could impact user growth, engagement and ad revenues for the companies right now the street is not too worried about the impact of all this on big tech's bottom line those same analysts say smaller companies could face more of a challenge given increasing regulatory expenses regardless companies do have to comply with gdpr or face fines up to 4% of global annual revenue or 20 million euros

build democratic regulation for people and with people, that's what we did at european level with gdprhat we want to do. innovation, smart regulation, that's the best way to be the most strategic place >> thank you, mr. president. >> karen tso talking live there to the french president, emanuel macron at the viva tech industry summit where his message clearly was look, regulation on the data that with this gdpr is compatible of building a thriving, domestic tech sector. so the two are not mutually incompatible, more regulation, which is aimed at ostensibly protecting the consumer, protecting data privacy with building up the tech industry. whether it's silicon glenn or silicon valley >>> the european commissionitalo continue cutting debt. eu officials said that the country is currently respecting budget rules, but that further actions will be needed the five star and lega parties agreed on a program that couples lower taxes with new spending plans. >>> italian president sergio mattarella offered giuseppe conte the mandate to form a government willem marx has more for us. he's a relativ

we'll tell you about gdpr. >>> plus, how is the temperature in your workplace? many american workers are hot and bothered about it. why your bus should hear about a knew temperature survey out today, when "today in the bay" continues. maybe you could save energy by weaving your own shoes... out of flax. or simply adjust your thermostat. do your thing, with energy upgrade california. having a working smoke alarm in your home more than doubles your chance of escape in case of a fire. smoke alarms can provide an early warning if you follow these 3 steps. repalce your smoke alarms every 10 years. if they're old an discolored it's time to replace them. check your batteries regularly. a great time to change them is and lastly, check your alarmsu an weekly. replace. change. test. because early warnings help to save lives. >>> good morning, i'm meg tirrell live at cnbc global hblgd headquarters: wall street is indicated to open higher after fin. >> in the red yesterday. the markets fell after president trump announced le cancel the humity with kim jong-un. but stocks ca