I can already welcome you all to this first cells lunchtime lecture of 2021. Welcome everyone. And my special welcome today goes half, half around the world. Welcome to Professor Damian Chalmers, who's the vice dean of research and the international professor at NUS. He is a known authority in European Union law, also because he worked at the LLC for 24 years as academic and later professor. He has a distinguished publishing career. And today he's going to talk to us about his take on data protection and data self determination. A very warm welcome, Professor Chalmers and I should remind participants that please use the Q&A tab. If you have any questions and we will pick up your questions after Professor Chalmers presentation. Thank you very much, Marcus. Thank you very much everyone. It's a real privilege to be invited. I tend to waffle on and I've got quite a few slides. So I'm just working out the share screen technology, which I hopefully will do. And I will just give you a brief summary of what I'm going to talk about today. So if I run out of time, then please give you a brief idea of what it is. Data protection is sort of like a new area for me and GDPR is, anyone does a Google search will find it's an extensively researched area. I've got interested particularly in the comparative political economy of it, particularly how it's informing and beginning to shape these protection regimes around the world, particularly outside Europe and the US. And to do that I thought I wanted to just understand a little bit what was going on to my mind in the EU. And this is a paper presentation that aims to do that. So the argument goes something like this, that if you look at the right to privacy, as it's historically developed. So what are people as a famous book by Daniel Salah that says it's a fair who argues conceptually fairly incoherent right to find a core of the right to the right to privacy or the right to respect the privacy is quite challenging. I tend to take the view that the way privacy has evolved has been a little bit different there is a logic to it, even if one's looking into the doctrine is sometimes a little bit contradictory. The logics, historically been this certainly I think you'd say up until the early 90s it was the following that the processes of modern life can put unreasonable demands on individuals and privacy is there really to police is unreasonable demands, and as the processes change over time. So the doctrinal content of this right changes these processes and their demands have shaped the doctrine a little bit. Now what has happened with data protection was, I think we could see that in the early years. But when one got towards developing in particular the single market. This protection, particular the 95 develop directive and these these developments being accelerated significantly by the GDPR privacy acquired a new dimension, in addition to this became associated also as almost a good a right entitlement to the management of one's personal development, what privacy increasingly was about was cultivating cultivating the individuals personal development, often for them, and how this was managed. And because it acquired the became if you like a good and it's own right a process and it's own right. This meant that the unreasonable demands that data protection is put on and being poorly policed. This is basically the argument. Nice. I'll start and I'll just do it in a second by sort of clearing the brush a bit. And giving you for those of you who are EU lawyers or other protection experts, beginners sweep through the GDPR and pointing out some paradoxes about it. On the one hand, it's, it's hailed as marvelous, but on the other, there were many things that are quite problematic about it. And what I'll argue in this paper is that a lot of the challenges with this arose from the transplant of a principle of German constitutional law, the principle of information self determination which works. Works pretty well within the German constitutional context to EU economic law became a market making principle. And this principle above everything else and the way it was transplanted by you generated a lot of the shape of the market we currently now have in the EU, but increasingly also beyond. This is an argument and if I run out of time, hopefully that'll just keep you on board. So the GDPR, the regulation to 2016 six, six out of nine, a beginner's guide for it. First of all, it sets a lot of certainly for mention this of six conditions by which your personal data my personal data may be processed by members maybe managed held disclosed you stored by someone else. The first is where there's express consent that consent has to be free specific and informed on ambiguous ambiguous. I also put examples, I also put their set of properties for consent, where the data in particular, where the data is necessary for the performance of another contract to which the subject is party, or I've asked someone to enter into such a contract and preparatory step, and the data is necessary for that. The second instance is the third circumstance where it can be used is where the person, the person charged of using it has a legitimate interest in using it, but this has to be balanced against this my civil liberties in particular my privacy. The fourth is where they think this is where I don't necessarily present my vital interests. And the final one is where it's necessary to fight the fifth and the sixth was in the public interest, or the some related exercise of authority. So there's a circumstances when if you like someone else can use have disclosed your personal data. So inside that, there are quite extensive responsibilities that are put in charge of the data controller the person in charge of all of this. They can only do this if it's an accordance with the law but it's just wasn't fair that they have to use this accurate they have to ensure that it's secure, and they have to ensure that the data that the process is proportionate for longer to the purposes for which it's being used relevant to those purposes and adequate. Next they have to communicate to the data subject in particular, provide clear information about what they're doing with the data. Thirdly, this is one of the significant innovations of the GDPR. There's a principle of data protection by design, but they should take technical organizational measures to minimize the personal data that process process issues. State of the art technology where possible to ensure as little personal data process as possible. What they do with a high risk from the data store or they're using new technologies is a particular forms of AI is carry out an impact assessment on protection personal data. And with a core activity is significant processing. They have to have data protection officers like compliance officers. Finally, finally, and I'm just putting you have the right to the data subject haven't I'm not dealing with the regulatory bodies. I have the subject of the right to ascertain and be notified of the purposes for which one's data they're using the processing was data, either might disclose it to and this was added by the GDPR, the period for which it's going to be held. To correct in that one inaccurate data, the data they put is just not true. The right to raise data. This is the right to be forgotten with the grounds for processing and disappeared. There's the rate to data portability. This is a new right handed by the GDPR where if you're, you should be able to take your data and have it processed by someone else and has to be on the form, you can sort of carry it to someone else. Finally, you have the right to object to someone using your data for profiling purposes, particularly where this thing under the public interest heading, or the legitimate interest of the processor. So that is a beginner's guide and a very crude guide to what the GDPR is about does. There are some paradoxes when you look at the GDPR for my mind to my mind these were really significant paradoxes. The first is it's amazingly influential. This is why the European Commission just can't talk about the GDPR enough at the moment to or data society. Even though big tech doesn't have to incorporate its requirements for stuff outside the EU, you'll find it incorporated into all of the comments of big big tech companies. There's been a rush of laws around the world to parallel the GDPR terms. So it must be a bit careful because a lot of states will say that they aren't doing it for this purposes, and the laws often have significant divergences with the GDPR. But in Indonesia, Malaysia, Singapore will change their laws. Japan, South Korea have Brazil has Kenya has and the California Consumer Protection Act, although there's a lot of debate about it at 2020. There are parallels as seen between it and the GDPR. So the GDPR has had some transport transporting effects. In some cases it's for states have free trade agreements and they want to have free amount of data with the EU. I think that's certainly the case for Singapore, Japan and South Korea. The third thing the EU has modestly marked its own homework and called it a Magna Carta the GDPR. And they're particularly proud that other international bodies like the GDPR, particularly because of its notion of consent. That's at its heart. And they point, the commissions pointed to a speech by the UN Secretary General in December 2019, the Italian Senate, said the EU should lead the digital age. And so that's, von de Lenz been talking to Biden about a new common rule book and I don't think she's thinking that the EU follow US data protection law but more the US align itself where possible with the GDPR. Now that's all very well. But you then, if you look at what's happening on the ground, you find a lot of contradictions about the GDPR. There were no levels of compliance with the GDPR. There were studies done one year after it came in which suggested many as 72% of companies were missing their obligations. There was an interesting report by the UK Information Commission officer which looked at the data-broken industry. These are the big harvesters of data in the world. In the UK they have data on absolutely everyone in the UK. They were breaking the GDPR in quite flagrant ways. There are arguments at data brokerage, which is one of the most problematic industries for protection of personal data is less well-policed in the EU than the US. The point about the GDPR at its most extensive, so this is how I expect the Court of Justice to interpret it, is it allows any data for which I can become identifiable is caught by the GDPR is very over inclusive. It can include so much if you think about the data that can be covered by that, not just data that relates directly to me but anything by which machine can identify me. So some critics the Court talked about becoming the law of everything. Thirdly, whilst it's a fashionable the slag of China, particularly China's use of information technology, it's an interesting thought experience to consider with the GDPR prohibit what China does. So if you looked at China's extensive surveillance in Xinjiang, which really is like something out of Tom Cruise film, that would almost certainly be allowed on the GDPR and the state security grounds. The ant social credit scheme, which is actually now being attacked in China by the authorities, which is this idea that everyone has a social score based on almost everything isn't a world array from the five C's credit rating systems are actually used in places like the UK. And finally, when always has to be a bit skeptical about a system of being the Magna Carta for data protection when Amazon and Axiom, which is the world's, I think, biggest data broker. So this is absolutely fantastic in the US should have it. So it's worth thinking a little bit what's going on here, whether GDPR, you know, clearly has some promise, but there are contradictions there. I'll just take you now through a little bit through my argument and just bear with me a second because I haven't actually set to find I'm doing for time. So, the arguments about privacy. Now, historically, privacy has been known as a famous article by Brandeis and Warren from 1890. Long-sanding law articles laying over 100 years and it's still not in which some sort of record I think from a law review, it was a law of use. And the piece from privacy, they said, privacy is the right to be let alone. This is historical, your privacy that the early cases in the European Court of Human Rights talked about this as the right to protection from arbitrary interference from the state. Historically, we think of privacy as seclusion. Even if one starts with that definition, what is interesting about that is that notion is associated with the early 19th century. And there was the growth of the administrative state of extensive policing classification, detailed regulations, identity at that stage was as understanding that the crime has ought to conform to particular types. So it was very much a reaction, that definition of privacy against this move for conformity and this growth of the over extensive administrative state. What begins to happen in the 50s and 60s is that privacy requires a new meaning. And this is privacy concerns began to emerge, not about the state poking into our bedrooms, just about what it did with all the information already had about us. This became increasingly increasing concerns about this with the growth of the welfare state, use of censuses, the series of scandals in Europe and particularly in the 1960s. What you find in the US in the information practices, Council of Europe resolutions that began to emerge, legislation that developed first of all in HESA, the first place in Germany in Europe to have it, the question of land and then in Sweden in the early 70s was governance on how public administrations, but also private organizations, but they were seen as less of a problem at that stage or less acute problem, managed the information had about us so data was only bigger to be collected if it was proportionate to the purposes that characters will collect lawful purposes that to be accurate enough to date and subjects had to know what was held about them and be able to check if it was accurate. And there were concern there were also particular worries about sensitive data data might be used to. I tried to pressurize the subject. And this was very much the view of privacy that was taken of the 60s and 70s. But then something quite interesting happens in the mid 70s. The US, which was concerned increasingly as it began to credit card industries, things that want to use individuals data for transnational transactions began to get worried that the growth of the laws that were developing in Western Europe in particular that time, this impede free flow of information, which began to be developed quite aggressively and transnational trade prefer the free flow of information case law from the 60s by the US Supreme Court. In the meantime, the Council of Europe comes to the idea that having a general privacy convention might be a good thing, because it saw parallels in how all European states are handling this issue of governance, how we are known. And this kind of left in the mid 70s around two things. The OECD became a forum for developing common principles and privacy to allow transnational flows of information. Alongside that was agreed that the Council of Europe pay heed to this and develop a convention convention became convention 108 on the processing of personal data. Now, both the OECD guidelines and the Council of Europe convention. We articulate the elaborate a little bit more but basically we articulate the stuff that had been developed in national practice and earlier Council of Europe resolutions on governance of how we're known. They did two further things like dealt with this issue of transnational flows of information. Now the way the OECD guidelines dealt with it was to say that in principle these privacy restrictions were only permissible if they were proportionate if they did not exceed what was necessary to protect privacy. The states could hold on to it but not go much further. Now the states could impose restrictions but they had to be related and proportionate to these governance requirements. The Council of Europe convention went much further. Convention 108 does something very interesting and the one hand it says it's iconography iconography is that it's about protecting privacy. It's nothing else. It's about protecting the right to respect for privacy in the context of processing data. But then it relativizes this right both in the preamble and article 12. And the preamble it says this right has to be reconciled with this is the fundamental right. I'm not sure existed at that time in Europe to free flow of information so very much a US concept. And then in article 12 it doesn't reconcile it just says basically that there should be no restrictions on flow of data on grounds of privacy. There's two exceptions for this one is for sensitive data. Where there's not equivalence between two states and the other is where the data might be retransferred to a state that is not in the Council of Europe not part of the convention. Now here one has something quite unusual. The privacy is now you've been used for something quite unique as a justification for transnational flows of information. The convention and sometimes on the OECD guidelines only make sense if you understand that now becomes something with privacy is the justification of transactions and personal data. However, the problem with the convention was that didn't really create a market, they didn't really specify for what purposes personal data could be processed and very very generic generic. There was still a lot of disagreement and difference in laws about when there could be transactions and personal data. And this was picked up beginning of the 80s in quite a significant way by the Commission in the European Parliament who said Europe had to do something about this had to be greater harmonization. It's part of the single European Act on the basis of convention 108. But it just didn't really get anywhere for many years, because crudely the member states didn't see much interest in the market and personal data at that stage so it's well before really the growth of the internet. Things changed as they began to be concerns about use of data within the context of Schengen. In 1995 you get Directive 9546 EC, which is the first significant EU law instrument on protection and personal data protection directive. Now, my view is this directive set in place as the template for the GDPR and many ways, when finding the GDPR is just an acceleration with one or two significant things of this directive. But what this directive does that's really significant is it creates a market, an autonomous market in personal data. First of all, at every, every aspect. First of all, the EU law gate keeps who I'm walking into the market data can be processed within the EU on for the grounds of the set up new law. It's exhaustive harmonization states can't introduce new grounds and they come if data meets the six purposes stipulated by you or have to allow it to be processed. Secondly, the, this is the old definition of personal data specifies the subject matter of the market by setting out a definition of data. Thirdly, we're setting out a definition of processing it specifies the types of transactions that can take place then specifies the market act as data subjects who can transact in their own data, data controllers who can be in charge of processing the data of others. And then it does it provides a limited liberalization transnationalization of this right it says in principle data that meets this directive states come restrict its flows transnational flows on grounds of fundamental rights. Now, that is an accrued way, what the directive says but that in itself I do not think is particularly interesting. I just said a little bit about principle of information sub determination and how I see it as interesting. The directive before I come on to print but that's something very interesting in Article one. It says, its purposes are to do two things one one, it's to ensure that member states respect privacy. In the data. And the second thing is, it really provides for liberalization of trade and personal data. It's based on what's now one one four and article one two has this market access provision. The background to the directive was that German law was highly influential. And it's worth me just saying what I'm talking about here particular was the directive refers repeatedly to the right to respect privacy. It's worth thinking who's right to respect privacy. And the conception that as I see was set out in general interpretation of that information self determination is pretty influential. The right to informational self determination is stemmed from a 1983 judgment of the German constitutional court, which all Germans Marcus and Charles very familiar with, which were they had to review and they found repugnant various elements of a census act on 1983. So we're going to set out this new right, which they said involved two things that involved first of all, the right to self determination, which is a right to choose whether to disclose data about oneself. And whether to follow up on that choice. I'll come back to that this element of choice and liberation. And after that they said the right to informational self determination includes rights of personality in the in this judgment so they said two aspects of sort of an enviable I shouldn't say private law and variable for private area of individual right to this purpose is they also have said it involved the right to publicly represent oneself rights to determine to a certain extent how was represented to others. Now they said that it followed from these two things that individuals had a right to correct to know and correct what was known about them. So this particularly so because of three reasons and this is my, my language not the courts, free risks omniscience was a concern that if someone knew everything about you. It might chill the actions that you take might be frozen from doing things either in social life or political life. There's a danger they might represent what you're about might put out false data.  Now, the right to informational self determination only has a relative weight in German, because it can be used by individuals to stop freedom of expression to stop. It can be outweighed in two other circumstances, where, and then the court said, one is the public interest and one is the legitimate interests of others. When I was thinking about legitimate interests of others thinking particularly about journalists. In that judgment, it is a judgment very much a German public born German constitutional strong ideas in a vibrant from public sphere, and a balance between that and this idea of individual private choice and his right to personality links to human dignity. Now, I think the link between it and the directive and between current to you law is quite strong for a number of reasons. First of all, the people who had been strongly involved with principle of information self determination in general constitutional particular cost of submitters who set up the first hassle act was involved in drafting the directive and had a pretty exclusive role in self determination only allowed them to be really involved with the initial proposal. So, it's architects were pretty much the same. Secondly, if you just look at the walking one say the Constitution context, this was the period of venture. And, you know, so long ago current, you know, you lawyers knew that they would get a free pass in this civil liberties sensitive area, if they could show that their protection was at least as good as that. There was a commitment to being at least as good as that in national constitutional law. And this was the main national constitutional court judgment at the time so satisfied this, you'd be fine. And thirdly, if you look at the directive at a formal level parallels in a very powerful way, the information self determination. So the market constitution reasons the reasons for allowing that to be transacted follow the information so determination consent public interest legitimate interests. Secondly, one can find the same market regulating controls that all about the right to know and correct what is known about you. The right to be forgotten so much later I was developed in 2014 by ECJ case law. Thirdly, there is this concern, albeit perhaps not as authentic in my view, as that of the German constitutional court with a private sphere data process and personal household activities is excluded. The legitimate interest of progress have to be balanced against the right privacy of the data subject. And there were some restrictions where we're profiling takes place. And actually, those would be I think the good intentions of the architects. But this transplant is all about the danger of what happens when you transplant one principle for one area of law this German constitutional law to another to EU economic law. And I'll just go through this, and then I'll probably whiz through the things. The first thing that happened with the directive was that it changed the main the central basis for which data was processed. If you look in the German constitutional the 1983 Census Act government. The reason public authorities say they can process is normally the public interest. In this particular case with market actors. They will always be arguing or trying to get the consent one way or another of the data, data subject. Now this has an interesting effect. It means that realization privacy or informational self determination, my choice to disclose and realization will market often become the same event agreement to allow someone to use your data becomes a transaction or the transaction. The second feature that's unusual about consent with GDPR and the predecessor is that we're in a general constitutional consent was central to allowing individuals to reflect deliberate they could change their mind. Consent is used in a different way in the EU data protection law. It's obtained promise that if the other party asked you for data and you sort of agree, then you almost bound to let me use it at least for a while. So it's stripped of its elements of reflection information reconsideration. There's none of the cooling off periods you'd have with the you can consume protection. Now, as a consequence of consent becoming the main vehicle for processing something else quite interesting happens. But if you look at the informational self determination principle. It now becomes about not governing. It gets removed from its initial context which discussion of relationship individual and state the governing private relations. And this is only something that was agreed by in general constitutional call by which should be set in 2019. And not just that it taxes those relations and what I mean by that is the person that's processing the individual that you are personal data has a lot of duties it costs the money. And so there has to be a good reason or return for them doing it. And next it says something quite interesting about privacy, both informational self determination and the dbtd that say there is no collective interest in my seclusion. I have a right to let someone else know everything about me, absolutely everything no matter how intimate, how shaming, how gross. Now, the original principle said well that's done so on the axis of choice. It is slightly different with the dbtd with you data protection, because it's no longer about choice. You do this to help establish a market, there are incentives on the markets, the market is given over to ensuring the efficiency of the management of this information but in terms of it, the allocated efficiently or used efficient produced efficiently. So, there is a collective interest in sharing that information, it may be subject to my consent, but it's the collective interest is now weighed further in favor of a bit of software in favor of sharing that information. Now if that's so, what does it mean to say well this is about protecting privacy, it's not about protecting seclusion anymore. Now, ECJ has been absolutely clear that the data protection directive realises the right to privacy and the right to data protection invented a new fundamental right for us. Pushkir says that if you meet the requirements of data protection directive, you meet the requirements of these rights, they're one and the same thing, that's the 2017 ECJ judgment from Slovakia. Now my only view when I looked at it was looking at how it's developed in the US and there's some ECH case nor on this. So the privacy is moving towards what is an individual right to personal development, but to a notion of personal development, but what happens when people share their privacy. They get the access to important spaces, virtual spaces, the ECH case nor specifically about the right to people with disabilities to use public spaces or you could use article H for that. And increasingly privacy has been seen in that right. That in my view that was taking place and I don't say this is any defender of this is the privacy is you being used as a management of your personal development. That's what is happening with the Facebook or wherever else as guardians of this semi private space. This protection experts people like Dana board have pointed out that you know teenagers on the use Facebook is precisely as a semi private space to converse with other teenagers for good and for bad away from their parents. So they've moved the information society and privacy to this idea of personal development. Alongside this, a number of other things happen because it may be in our guardians of your personal development, but it's a market. And the market relies on information rather than personal knowledge. So they stripped down your personal knowledge to bite sized bits, but they also stripped down your knowledge, the takeaway tacit knowledge, it's knowledge, only that can be explicit. And by doing this, what that means is, because we know more than we can say, they stripped down things that are very important to most people's self knowledge, particularly according to psychologists, ideas of meaning experience and awareness or rely on things that we don't articulate. These have to be repackaged when they are shaped back to us and knowledge. And I'll just deal with one final thing, which is the data controllers. If you look to the original directive, well, there's provision for independent agencies. The data controllers, the people managing the data when it looks, the other center of regulatory gravity, there's no doubt about that. The assumption of linkage and self regulation. But it was weekly regulated or weekly specified. And because I'm running out of time. I'll just go back to the GDPR and just say how the GDPR change things that the GDPR, as I'll say, put some much more explicit conditions, particularly on consent. There's a bit of stuff on the rights of the data subject. But what it adds that's particularly interesting, in my view, is where it will. It is on the responsibilities of the data controller formalizes these notions of self regulation, much stronger requirements for data protection officers impact assessment and data protection by design. And how does this change things. I'll just go through this and hopefully allow you five minutes for questions. The first thing that happens is the GDPR in relation to the data protection directive. I say it fetishizes consent. What do I mean by that. It requires consent to be much more express than it previously was individuals have to actively consent much more vigorous, much more obviously to their data being used. The consent is more ongoing now. It's possible to withdraw consent on any time. And it's more wide ranging. You can swap people who are managing your data. You can, you get more information about what your data is being used for so you can see if you're happy on it. What it fetishes is it's been known since the 60s, the so called privacy paradox that people don't manage aren't very active managers of their privacy. This idea that people actively consent and think about each time, even if they could, and there's strong evidence that they don't have the information to do that. The latest survey I saw was about 2.8% typically interested in experiments. So it overstates this and surprisingly enough, the commission has noticed that no data portability of much note has taken place in the two years of the since the regulation came in. So if consent is a problem at the beginning when you just have to take a box that you have to read the notices, you're not going to, it's going to be more of a problem for monitoring. So it's worth thinking what consent is being used for. And that should not say ex ante, that should say ex post, that's a typo. Increasingly if you look at what the new consent is being used to, it's increasingly used after you've initially allowed the person to process the data. And what one's agreeing to at that moment is checking what sort of persona is being developed as the idea that at a certain point if they develop things or develop things in a way you don't like, you can withdraw it or correct it or remove it or whatever. But my view is that what's happening here is that if you see them as developing personal development, isn't that people are going to object because they've got they see violations of the privacy or the information on being used in the right way. It's likely that the returns that what's being offered for the exploitation of the data isn't great enough that what might happen is the services aren't particularly good enough or whatever the gimmicks etc. So my own view of what's happening here isn't so much that it's about privacy but ensuring a market between processes of data where they increasingly offer returns and return more gimmicks more toys more more jungles in return for processing your data. Secondly, what's taking place in terms of the competitive geographies? How's this affecting people who are actually managing your data? There's strongly that there's two, there's three types of group. There's people who manage data and the information they do, they really want the data just to know something about you to sell you something. I mean that's still going to be quite extensive. And these are the groups that are really struggled with the GDPR because most of the burdens of the GDPR are front up burdens. And that's where you've seen all the debates about it being over costly. Now alongside that, you've got this formalization of self-regulatory duties for those engaging in significant processes on the Facebook of this world, data protection officers, design impact assessment, codes of assessment etc. And what I'd say about that is that it will be quite interesting to see how these develop. Increasingly there is resort to or suggestion to resort to use greater use of international and European standards. And it's been suggested that the standardization processes might be places where different stakeholders come together to, if you like, work out different conflicts. But as of anything these conflicts will be skewed. People are managing your privacy. Yes, they might want to do it in a way that's reputation and good for them. But they will still want to get returns. And they will still want to do it in a way that provides services to others. Now I'll leave this. I'll do this side and then I'll stop. The next thing that's quite interesting happening is what the GDPR does for EU's relations beyond the world. What happened with the data protection directive was there was a push to consolidate the market both internally and externally. So it didn't just affect transnational trade, it affects absolutely all processing whatever its scale in the EU. And free flows couldn't take place beyond the EU if the data protection wasn't adequate. So the Commission traditionally interpreted that broadly at least as good as EU law. Now the GDPR takes us a bit further. The Commission can now only grant adequate citizens so it can only allow free flow of people's data, not just if there's an independent agency that's following GDPR rules. But if the state generally respects rule of law of fundamental rights, so your data is not going to China anytime soon. Now, alongside that, however, the GDPR provides for transfer what it calls binding corporate rules. These have to be authorized by an EU data protection office. So these binding corporate rules were typically between groups of enterprises that can be certification by standards, which have to be binding and they have to meet EU standards. So it's a basic form of private regulation, which is signed off by a private agreement by an agency in the EU. And when already sees international standards being developed to try and meet this and there's a lot of debate about whether he's a GDPR compliant or not. Now, this, this is interesting, because this transplant effect has generated political economies of data protection in all the states that have responded to the GDPR and you find two, two responses. Some who emphasize ex-anti-consent, so Singapore I am is one, and others we focus on ex-post accountability, the responsibilities of data processors. And how these play out, how the data protection authorities will work out what the regimes it will about, will be interesting, it will not simply be about data protection, it will be over time about competitive advantage. Alongside this, I think it's likely that you might also have some data, data nationalism, data protection nationalism.  And what I mean by this is there's a good chance that in deciding whether firms are data compliant, both under these binding corporate rules in the EU but outside the EU, you know, competitive advantage, questions of being more skeptical of data protection standards of firms or one's own firms, may in turn become an issue. And I'll stop there and happy to take questions and apologies for overrunning a bit. Thank you very much, Damien. Thank you very much, Professor Chalmers. We have a couple of minutes for questions.


apples and tiaras my name is charlotte if you guys are new here i'm a third grade teacher in arizona and it is friday which means it's the weekend it is um january 10th today so it is the end of the first week back since winter rake and you guys i'm exhausted the week was super great it went by really fast for me the kids were great we started fractions this week we started um text features a lot of cool stuff was going on just a lot at a time um but i would love to do a weekend vlog for you guys so i'm starting it right now on friday afternoon i'm leaving school i'm gonna go pick up cash and then go home i hope you guys all you teachers out there had a great first week back from winter break we've got this we've got four months left at least we do because we end in may here in arizona um and we have three months until standardized testing so we have a lot coming up i am gonna get to driving home i've got an hour commute before i get to my son's daycare to pick him up life is a winding road no telling where it goes driving through days and nights won't stop for traffic lights i really want to know really want to know if i'm falling down i will keep on searching for my eyes you can say i lost my mind i will keep jumping from cliffs so high trust in our wings to fly sometimes we're crashing down good morning friends i hope you can see over the steering wheel um it is saturday morning at 8 55 in the morning and i am obviously on my way to a princess event it starts at 10 30 and it's about an hour and five minutes away so i'm leaving an hour and 30 minutes early one because i want to go get coffee two i want to get there with enough time to put the rest of my hair on because this costume requires a braid attachment that hangs over my shoulder you guys can see the clips right here so i'm just gonna go to starbucks grab a small coffee i haven't been drinking big coffees because i find that when i drink a big coffee i drink less water throughout the day and then i feel more dehydrated whereas my caffeine addiction i really only need like a small coffee to get me through i also have a throat coat tea here this is a tumbler that i got from lipstick and littles if you guys are interested it's my favorite online teacher store she makes all my favorite t-shirts if you guys are new to my channel and you don't know lipstick and littles is totally my jam it is linked down below and then i also have my vlogging camera my phone because i planned on vlogging today this story is really sweet so the grandma actually called me um super last minute and she was like my daughter and my granddaughter in arizona i'm in new york i really really want to get a princess to go to her party she loves repunzel can you make it happen coincidentally i happen to have a party tomorrow and so i was like let me personally do this for you i had the day off my neighbor was available to watch cash for the day since i wasn't sure if scott was going to be working over time um and it's just hard to like plan things for scott to watch cash on saturday mornings because i really never know what's going on with his schedule saturday sunday monday tuesday i just don't even mess with it so christina my next door neighbor she was free to watch cash and this event will be over by 11 30 so i'll be home by 12 30 at the latest unless i like stop and eat so i just wanted to do it i have another party tomorrow it's an elsa party and i'm super excited for that one the only problem is that if you guys can tell my voice is super raspy and tired i've been sick the last week and a half at school and when i'm sick like i can preserve my voice but at school there's no way i'm preserving my voice because obviously i have to talk i have to teach there's going to be a lot of raising my voice involved in managing 24 students so that's why i'm drinking that throat coat i also warned the mom tomorrow because i'm supposed to be singing the new frozen song into the unknown and i told her i was like i'm gonna sing it but it's not gonna be to the caliber that it normally would be like i'm not gonna be like adena menzel status but i will sing the song it will sound pretty but it's not gonna be like super belty it'll be very soft and like not crazy so anyways i'm gonna stop talking to you guys because i feel like i'm talking enough okay my camera says that my battery is empty so i'm gonna switch to my phone now birthday party yeah thank you is that like the best job ever yes yeah thank you you too everybody's reaction is different um some people like are very confused and they ask really strange questions like some people will go along with the costume and they'll like talk to me like i am repunzel and then there's more times than not people like that who are just like oh my gosh where are you going and they like it's crazy how many people in the world don't know that people do this that people like dress up like a princess and go entertain kids for their birthday it's crazy there's a lot of people that don't know about it um i got a small vanilla iced coffee and now i'm going to trek to the event it's 923 that drive-thru took me like 19 minutes okay guys so it is 1138 the party is now over and i have to go tinkle um there's looks like there's a high school across the street from the park so i'm just gonna pull in over here and just change take my wig off um that way i can stop somewhere and a grab some food and b because i drank all of that tea and all of that coffee and all of that water okay and that is how it's done all right i'm gonna get off this phone i need to google somewhere to go to the restroom and get something to put in my belly because i'm starving hey guys so i am now at home i have washed my face um put boogie to bed he's waking up now um and we're gonna go get him and then we're gonna spend the rest of the day together and i'm really excited so let's go get him did you take a good nap you want some snuggles you want to go outside and do you want to go play at the park cold out there i'm sure you want to go out there oh jeez riff you want to go to the park you what you want to go outside yeah should we go get dressed put on some shoes so you can go outside do you want a sweater it's still fresh he's still waking up but we get up and start from the ground i will keep on searching for my lost my mind i will keep on holding my head high even if the sky is falling


Okay, we're in the lobby to look at the area. This is Lauren Parks and this is Patty. And we are here to do our weekly hand, which also doubles, because we like to multitask and it doubles as a plan. And so what we're going to do first is we're going to do the action, which is we're going to write together, we'll work together for 45 minutes, and then we're going to do the dialogue, which is that we will take your questions about your work and your creative process, and we will do our best to answer them. And we don't have any questions. I'll read from Emerson. That got some Emerson today. And for those of you who don't know, Emerson was in trouble, he was in trouble. It was amazing. So a little plug for a dead man. So if you guys are out on the interwebs and you want to tweet in your questions, Patty has the address. You can tweet your questions at watchmeworkslp with the hashtag new play. Watchmeworkslp hashtag new play. Okay, it was that. We're going to work for 45 minutes and you're going to help me keep track of it. I'm probably going to work, usually I work in my tech writer, but today I think I have some things already on my iPad mini, so I'm going to just work on my iPad mini. And if you feel like low, think Emerson. He's great, he's amazing. Does anybody know about Ralph Alder or Emerson? Anyway, we will, if we've got other things to talk about. So let's get going. Now we're going to do the dialogue part of the play. Several things. One is Emerson. One involves a story about some cooking tongs. So if we have no questions, I hope we learn to those things. But unless you'd like to talk about some cooking tongs, it's kind of interesting. To me, anyway. Anybody have any questions about your work and your creative process? What's that purple thing on your keyboard? Is that like a little purple layer? Oh, wow. Oh, that's pretty. Let's remember them. It's like gummy. Ooh. Ooh. Does it count? Does it count? Is there a pink one? There's a pink one, I bet, in the story. Oh, really? Anybody have any? Sorry, I'll just seriously, this is a serious show. But I'm not always, but just then, I was listening to a song called Poor Ellen Smith on repeat because I'm learning the walk from guitar. So I figured I could have it just leak into my head. It's about some ladies, a historical song about a woman who was shot by her lover and he told everybody to do it and then they caught him and he stood on the scaffold and said, I need to do it. You're gonna hang into this man. And right before he dropped, he said, okay, I did it. Oh. Oh. Anyway, but it's a great song and it's got some great lyrics and I'm learning the bass, the walk, the guitar back up. Poor Ellen Smith, yes. So I was just listening to it on a loop, which is, which is fun. We're no music or some practice earplugs for silent today, it's mostly the sound of your head. I'm a big fan of that too.  Once in a year, once in a year, once in a year. Right. And they used to like, when we had a lot of training out, yeah, things, you know, every one of the audience down there. Tell me again, tell me first your name. Jenna. Jamie. Jamie, okay, so Jamie's got a play, he's writing two characters and what was the situation? You can see it sitting in, there's two characters in a bear bunch or a bunch. And basically, basically what the book was created in their relationship and once they served independently in my life, in real life, in a way, intertwined. Right. And once trying to get at the other, right, but they're not, how do you do that in terms of not having to have a sparse dialogue? You just figured it out. I have a lot of action with sparse dialogue. You just said it. How do you do that? How do you create a lot of action with sparse dialogue? Well, I mean, you just said it. You create a lot. Really?  A lot of these answers, though, are takes question, you know, two stages. One, the 77, the 77, the 77, the 77, the 77, the 77. So that's being produced.  Yeah, it can. It is. Why can't you do the 77, the 77, why do you have trouble accepting that to the front? There are two questions now. One is, how do I do sparse dialogue and a lot of action? Okay, the answer to that is write sparse dialogue and a lot of action. I mean, that's exactly what it is. Okay, that's it. You figured out that already. So that's not a problem. Okay, just write a lot of action in no dialogue. So where most people, you know, you see their page and it's top, top, top, top, top and then a little say direction over here. Yours is gonna be, stay straight, stay straight. Okay, so that's what yours is gonna be. So that's what it's gonna look like and all you can do is go in there and fill up the blanks. It's easy, just make up some action. That's easy. She stands on one foot, she nods her head. She does a summer song, freaking it out already. The other thing is why is your director of your play this about to be produced or this being produced is telling you that they don't like what you've written? They don't like the way it's written. Yeah, which is kind of the same thing. Well, can you get another director? No. Why not? You've committed. I know it's like being married. I know, so it's okay. Again, you can't do this. Right, gotta get? Gotta get. Gotta get. Right, so. You can't do anything. You know, it's fine, but I'm going.  Yeah, so you just make up either of you, listen to them, take their feedback and change their play accordingly. If you think that they might be right or you dig your heels in and change anywhere from nothing to a few things. Yes, so you're somewhere in that area of I'm gonna change some things, okay?  I mean, it's, you know. But the thing is, is that you're in a difficult situation, you do not necessarily have to suffer.    And you know what? They're gonna get mad at you. If they're getting mad at you for the right reasons, you're being kind, courteous, and generous, and sticking up for something that you need to stick up for, meaning yourself.  Let them, well, what can you do?  That's tough. For you, that's gonna be tough. That's called people pleasing and there's a program for that. We as playwrights don't need to be people pleasers. I think, for me, in my experience, we need to answer to our characters.  That's an extreme, and the other, there's a program for that too, okay? So it's neither of those things.  And the best you can do is just muddle through it. Muddle through it, you know, that's a great thing about having to play. You can have it done in another city, another town, another town. I would say I would suggest that you speak your mind to these people and appropriate and then appropriately or helpful way. And that's a skill that you're gonna be learning. Welcome to the theater. Anybody else? Stacy, your shoes, I'll just call them. They're just big. I know, I like them. I've not had to buy a shoe since 1995, so I'm really enjoying them. Oh my gosh. I live in Charlotte, so I like them. I'm sure you're gonna be writing, well, that too. It's like I'm enjoying it, but I don't wanna burn out. Like I'm really enjoying the media about our stories. Right? And they're different media, and I'm good with that. Yeah, but it's just like pace is amazing. Yeah, so Stacy's writing four different things, four different projects, four different stories, and she's asking how do we keep that up and we don't burn out. Yeah, sometimes you burn out. Sometimes a car runs out of gas, you gotta go to the gas station. You know what I mean?  You know what I mean? I wanna go to the small pee.  You know what I'm saying? Ha! You know, I'm just saying. Think about it, right? We don't wanna go there, we don't wanna go there. You wanna take a break.   And that's okay. That's okay. If you love them all and you have made time in the day for all of them, you know, make kind of a week or however you're scheduling your time, which is major, which sounds like you figured out, which is great. And just keep doing it. I mean, some people work on only one thing at one time, you know, and other people can work on two or three things or four things or eight things or whatever to work or work on one. Like, everybody's process is different, I guess. And I feel, you know, it takes longer than me to kind of get tired when I'm working on different things because I'm hopping into different worlds and it's just not that constant, you know. But really, in reality, you're only, I believe that you're only working on one thing at one time. Really. And that's the sort of, really. Because when you were working on, say, Project A, you're only working on a project today. And then you work on Project A for an hour, and then you turn to Project S. And you only work on Project S. You're actually really working on one thing at one time. It's important to remember that that's how you are successful at doing that.  And you switch channels, you know. Like, you're watching 27 channels at the same time. No, only one at a time. You can switch channels. Because I'm doing it once and I'm doing it as three channels, you know. And I imagine I'm doing it all this time. What do you want to do? Just talk to me? I don't know. Well, we need to do this for a little while. Yeah, we need to do this for a little while. Attention, yes, this is a little while. Something can have attention, whatever it is. Something can have attention. Something can really get a concentration on it. Rarely. Something can be rare, actually. It says I know people who really want to be able to do that. But it's great to be able to concentrate whether you do one thing at once or something. The main thing is to just be able to sit down, plug into your thing, and focus. Oh, 88 feet. Oh, check. I love this. Back in the day, I don't think it existed. It's like the terrible twos. Everyone tells me because my son is almost two and a half. And when he became two, I had a legion of people, legion strangers, literally running up to me. Oh my God, now I'm prepared. But no, I'm not choosing over. It would really, people phoned me in the mouth and tried to give me, you know, it's like, doom is coming. And I was just like, I don't know. Let me see. I haven't seen it yet. We're almost at the half point. So, I think it takes two. The terrible twos take two. I don't think he's participating. I'm like, Aaron, how are you? Just need to see you. You're working? I am. Yeah, how's it going? Yeah, then I go into the shoot, I know. I'm having a story that was a short film, a story that became a bigger and bigger figure. And then I started realizing how much sort of like autobiography I was putting into it that I didn't think I was. And now I'm seeing that it is. Part of me like doesn't want to sort of like rely on that in a way. Like I don't really know how to say this, but like part of me doesn't. Part of me is nervous, it's becoming so, if that makes sense. And I'm not sure whether I should be concerned that like putting parts in, and mostly emotional stuff, not like actually, oh, this happened in my life, so I'm doing this, but like, the foundational like motivation, feeling or lack of motivation, lack of action, things like that. So I get a little concerned every now and then like something resonates so much that like, am I, is this actually the easy way I would rather than an interesting story? Do you think the story is, the screenplay story is working as a? It's story? Well, I think that's the, that's why like I'm trying not to worry too much about because I actually find me feel like it is starting to work whereas like I was having a lot of trouble with it, but cool. Right, right, right. I mean, mostly I'm just going with it, but that's not what I mean. Uh-huh, uh-huh. It sounds like it's going well. It sounds like it's going well, and sometimes that little, hey, it's too much of you in the screenplay. Now let's do it, oh, it's all about you, now it's all about you.  And good, you're not so attached to the moments that you can't cut and rewrite where necessary. It's feeling good, it sounds like it's working. I would say if it's working, keep going. And if you can recognize yourself, your emotional beats in the screenplay, that's not a problem. It's really not, I mean, I have the book of cries, you know, that's not a crime. I should get one of those for you, I'll be the judge. A white wing.   That's not in the cry book. That's a good way to do it. You're part of it, you're putting yourself in there. So here are the toms. Not a lot, not a lot.  So my son picked them up a couple of days ago and put them on his ears and called Grandma and walked around the house talking to Grandma with him. And I was just, well, and he was, well, interesting to hear, but hi Grandma, how are you doing? And he was listening and talking. And I'm like, what's with the toms? And then I realized that the toms, look, and then I started thinking, where does imagination come from? Because we're not, well, at least he was not born making things up. And some, I started thinking about imagination where it comes from, where it might come from. And part of the ingredients are lack. You miss something and the urge to be united with something that is not there. And so we walk around sometimes, we go, gosh, I don't have this, and this isn't working out, and this fell through, or these kinds of things that we berate ourselves and chide ourselves or matted ourselves because things, we don't have everything we want. And yet imagination, one of the ingredients of imagination, as I observed it, is lack. He misses his grandma and so he creates something so he can call grandma on the phone. He didn't ask me for my phone. He actually wanted to pretend that he was calling. He didn't want to talk, he didn't want to pretend, which was one of the first times I saw him pretend to do something, which is really interesting. So let's, let's cooking tell us. Now he calls her all the time. And then I talk to her and tell him to do, grandma's told you to do this. That's very helpful. I don't know if this stops working anymore. No, it's, that's when it gets really, and it's just all gone. Oh good, it's gone now? Yeah, it is, yeah. I wish I was, I wasn't in a place to relish my son when he was that age, so I'd love to hear you do it. I know, I relish it all out. I can hear you, I wish I'd relish it out. It does, I think relish, relish, anytime. You know what I mean, that's a thing that you can do. We can, like, that we didn't have. You know, we can, like, model us some things. We didn't have, we didn't get, or, we're not getting that, or whatever. But I think that lack creates a place for magic to happen. It's true, I'm gonna reach him, I'm gonna, I'll be out of time, we'll help each other. We have a, I'm gonna reach him, so if somebody else has a question, he's a tripper, he's a tripper. Ralph Waldo, there is a guidance for each of us. And by lonely listening, we shall hear the right word. Place yourself in the middle of the stream of power and wisdom, which animates all who it floats. And you are without effort and tell to the truth, to the right, and the perfect contentment. There is a guidance for each of us, and by lonely listening, we hear the right word. But lonely listening, not like, you know, high-falutely conversation with smart people, but lonely listening, which is quiet, small, modest kind of industry. Sitting down and just taking out your pen and your paper, your notebook or your laptop or whatever, putting the title. And there comes the voice from you. So, we done? Good, 79, and it's in the essay called Spiritual Laws. We have great folks for you anyway. I say it about school, for sure it is for God's sake.


Γεια σας, είναι Vicky εδώ. Αυτό είναι ένα βίντεο της βίντεο-χόπς, να διεξάσουμε το νέο καρδίκο, για να δημιουργήσουμε ένα μυαλό. Λοιπόν πρώτα, ας δούμε έναν κλίκο να δούμε τι είναι inside the kit. Υπάρχει πολλοί μπροστάκες, που συγχωρήσουν με τα κόλματα της κόλας. Υπάρχει αυτά τα πραγματικά πίγκ-ποσά, και με τα κόλματα της κόλας. Αυτό είναι ένα καρδίκο, καλύτερο στάνπσέ. Είναι ένα καρδίκο στάνπσέ. Αυτό είναι όλοι για τα κόλματα, και το σάμερα. Υπάρχει αυτό το καρδίκο που σας αρέσει. Είναι ένα καρδίκο, αλλά μπορείς να χρησιμοποιήσεις το κόλμα ως ένα σπίτι. Υπάρχει also two different alphabet stickers. A stencil that is great for creating your background scenes. Και έχεις όλες σύνορες, και very heavy, very thick six by six papers, για να χρησιμοποιήσεις αυτό το καρδίκο, το σάμερα καρδίκο. Μπορείς να δοκιμάσεις το καρδίκο, και θα βρεις ένα βίντεο στις βίντεο, όπως στο σκέφτερο σας. Αυτό είναι ένα κόμπανι από Γερμανία, αλλά πρέπει να δοκιμάσεις τα κορδίκο. Είναι πολύ λόγια. Για παράδειγμα, η κορδίκο στάνπσέ για λίγο χρήμα. Λοιπόν, ξεκινάμε και να κάνω καρδίκο. Έχω χρησιμοποιήσει two of the patent papers, the main part of the palm tree, the leaves, I'm going to cut it out from this beautiful patent paper, and I'm going to cut it out twice, since I want to layer things one on top of the other to create some dimension. The kit is going to be available for ordering online on Saturday the 14th of May. So you need to be quick because those kits get sold out really quickly.  Again, I'm going to cut it out twice. The great thing about this die is that it actually does two cuts. So it cuts out a border and the inside. You will see when I will assemble everything what I mean. I have also cut out a strip of paper from another patent paper and put it at the bottom of my tag and now I'm going to assemble everything. So first I'm going to stick down the tree trunk. I'm using a glue pen for that. I find it really, really easy to apply this. The fine tip makes the job easy. I'm going to stick it at the bottom and now I'm going to stick down the leaves. Now for the leaves I want to have enough dimension so that it pops out of the tag and you will see how I'm going to achieve that. So first I'm applying a little bit of glue only at the center of the leaves. You see that I don't go towards the edges of the leaves at all. So this is going to give me the ability to pop up a little bit the leaves on the edges. I'm going to find out all the inside leaves and stick them down and for those leaves I'm going to stick them directly on the tag. No pop up there. And then I'm going to stick on top another layer of leaves but on the second layer I'm only going to add glue at the center of the leaves so I will end up with three different layers on my tree that is really easy to create but at the same time they will give great dimensional impact. So here is how my finished tree looks like. You see I have three different layers one on top of the other adding lots of dimension. Now for the tree trunk I am going to stick down all the inside pieces directly on my tag and then I have another set of all those inside pieces that I am going to stick on top of them by using some foam squares so just because I have all that dimension on the top of my tree I need to have that on my tree trunk. Another idea that you can do that will help your tree look even fuller is to stick the different layers of the leaves slightly off so this way you will be able to see all the different layers even more. For my sentiment I am just going to cut out one of those banners from this patent paper that says Sunshine and what I really love about this banner is that it has a fishtail on one side which I am going to keep so I am using my scissors and also it is exactly the same color as my tree. I am going to stick this banner coming from the tree trunk and to finish off my tag I am going to use my cropped isle to make a hole at the top of my tag and I am also going to set an islet the islet that I am using is gold I think that it matches nicely the rest of the colors I am going to cut out a piece of my string there and just thread it through the tag and my tag is pretty much finished now I need to assemble the card for my card today I am going to create a standard card that is 4.25x5.5 and for my base patent paper I am going to cut out a rectangle piece out of this patent paper so this is slightly smaller than a standard card to stick my tag down I am using some form squares at the back of the tag I am going to peel them off and stick the tag directly on top of this patent paper and I am going to use my tape runner at the back and stick the whole thing on top of a top folding card to finish off my card I picked some of the glass beads that were included in this pack of sequins they are around on one side and flat bottom on the other and they are also crystal clear so this is the finished card I hope you had fun and got inspired and if you did don't forget to leave me a comment as well as give me thumbs up on my youtube channel here are some close up photos of the card today click on your screen right now so you can hop to the next stop on the video hop if you are on a mobile device and this doesn't work for you you can find links to the next stop just down below the video in the description area thank you all for watching