Tag: eu

Carole Cadwalladr’s thoughts on our broken society

At the MyData 2019 conference in Helsinki. I had the absolute pleasure of talking with Carole Cadwalladr after seeing a panel discussion about the great hack and also taking part in a workshop about it.

I realised I had not actually shared her TED talk on my blog, and only shared the great hack via the July public service internet newsletter.

I can change that easily enough, and I want to share some of the workshop resources, but not totally sure they are for sharing…?

Move fast and break society?
Sander Van Der Waal’s slide from a later mydata session

In an unmissable talk, journalist Carole Cadwalladr digs into one of the most perplexing events in recent times: the UK’s super-close 2016 vote to leave the European Union. Tracking the result to a barrage of misleading Facebook ads targeted at vulnerable Brexit swing voters — and linking the same players and tactics to the 2016 US presidential election — Cadwalladr calls out the “gods of Silicon Valley” for being on the wrong side of history and asks: Are free and fair elections a thing of the past?

Make the bold move and take a risk?

With all the chaos of the UK government right now, along comes a video which speaks to me.

My advice is to go for the bold move and take a risk. And if that risk means putting yourself way out there in an interview, or if that risk means having to move to a city you weren’t sure you wanted to live in, or if that risk means trying a field that wasn’t your first choice, do it.

That move is on my mind a lot.

39 days till Brexit and we still don’t know whats going to happen…

Its super depressing and even with 39 days left till Brexit, we still don’t know what on earth is going to happen. Even Jon Oliver can’t express how painful it is to watch the news everyday and see the PM of the UK trying to act strong with a crappy deal and following the will of the UK people.

Its a crappy situation the PM stepped into but I’m far from forgiving as she could delay article 50 and delay this clusterf**k. There is no way we should be allowed to leave without clear plans and a proper deal, if thats what we must do (I of course don’t buy it, I want to stay in the European union and always have done).

All I can do is put my head in my hands and think about how to escape the UK.

Data portability and GDPR, been waiting a long time for this

EU GDPR 2018

One of the things I always wanted but never couldn’t see how it would happen without the good will of companies. Was real data portability of my own data.

Google, Facebook and others do provide a data dump but I found it really interesting to see the difference in my Facebook dump/zip/archive. I request it every year or when something changes. This year I did one while Facebook struggled to deal with the impact of Cambridge Analytica and the new GDPR changes.

In 2017 my zip was 31.4 MB (31,425,658 bytes)
In 2018 my zip was 171.3 MB (171,267,617 bytes)

Unlike previously FB included ALL the media in the messages I’ve exchanged with friends. All those gifs and videos friends have shared are now in the dump. I find it interesting they were not included previously. Which always raises the question of ownership. Something we (dataportability group) talked a lot.

I’m so looking forward to similar with other services… Although I’m still unsure if you can legally create services which use the data exports to import or not. It should be possible, as its your data.

Having already crafted a email to send to OKCupid, POF, Bumble, Tinder and some other dating sites similar to when the journalist requested every bit of data they had on her. Its set to send on May 25th which is the day when GDPR comes into effect aka tomorrow!

Thanks to Ubergill for much improving the email I originally drafted…

I’m looking forward to the replies!

Dear {service}

I am making this request for access to personal data pursuant to Article 15 of the General Data Protection Regulation. I am still concerned that your company’s information practices may be putting my personal information at undue risk of exposure or in fact has breached its obligation to safeguard my personal information.

I would like you to be aware at the outset, that I expect a reply to my request within one month as required under Article 12, failing which I will be forwarding my inquiry with a letter of complaint to the Information Commissioner’s Office.

Please advise as to the following:

  1. Please confirm to me whether or not my personal data is being processed. If it is, please provide me with the categories of personal data you have about me in your files and databases.
  2. In particular, please tell me what you know about me in your information systems, whether or not contained in databases, and including e-mail, documents on your networks, or voice or other media that you may store.
  3. Additionally, please advise me in which countries my personal data is stored, or accessible from. In case you make use of cloud services to store or process my data, please include the countries in which the servers are located where my data are or were (in the past 12 months) stored.
  4. Please provide me with a copy of, or access to, my personal data that you have or are processing.
  5. Please provide me with a detailed account of the specific uses that you have made, are making, or will be making of my personal data.
  6. Please provide a list of all third parties with whom you have (or may have) shared my personal data.
  7. If you cannot identify with certainty the specific third parties to whom you have disclosed my personal data, please provide a list of third parties to whom you may have disclosed my personal data.
  8. Please also identify which jurisdictions that you have identified in 1(b) above that these third parties with whom you have or may have shared my personal data, from which these third parties have stored or can access my personal data. Please also provide insight in the legal grounds for transferring my personal data to these jurisdictions. Where you have done so, or are doing so, on the basis of appropriate safeguards, please provide a copy.
  9. Additionally, I would like to know what safeguards have been put in place in relation to these third parties that you have identified in relation to the transfer of my personal data.
  10.  Please advise how long you store my personal data, and if retention is based upon the category of personal data, please identify how long each category is retained.
  11. If you are additionally collecting personal data about me from any source other than me, please provide me with all information about their source, as referred to in Article 14of the GDPR.
  12. If you are making automated decisions about me, including profiling, whether or not on the basis of Article 22 of the GDPR, please provide me with information concerning the basis for the logic in making such automated decisions, and the significance and consequences of such processing.
  13.  I would like to know whether or not my personal data has been disclosed inadvertently by your company in the past, or as a result of a security or privacy breach.
  14. If so, please advise as to the following details of each and any such breach:
  15. a general description of what occurred;
  16. the date and time of the breach (or the best possible estimate);

iii. the date and time the breach was discovered;

  1. the source of the breach (either your own organisation, or a third party to whom you have transferred my personal data);
  2. details of my personal data that was disclosed;
  3. your company’s assessment of the risk of harm to myself, as a result of the breach;

vii. a description of the measures taken or that will be taken to prevent further unauthorised access to my personal data;

viii. contact information so that I can obtain more information and assistance in relation to such a breach, and

  1. information and advice on what I can do to protect myself against any harms, including identity theft and fraud.
  2. If you are not able to state with any certainty whether such an exposure has taken place, through the use of appropriate technologies, please advise what mitigating steps you have taken, such as
  3. Encryption of my personal data;
  4. Data minimisation strategies; or,

iii. Anonymisation or pseudonymisation;

  1. Any other means
  2. I would like to know your information policies and standards that you follow in relation to the safeguarding of my personal data, such as whether you adhere to ISO27001for information security, and more particularly, your practices in relation to the following:
  3. Please inform me whether you have backed up my personal data to tape, disk or other media, and where it is stored and how it is secured, including what steps you have taken to protect my personal data from loss or theft, and whether this includes encryption.
  4. Please also advise whether you have in place any technology which allows you with reasonable certainty to know whether or not my personal data has been disclosed, including but not limited to the following:
  5. Intrusion detection systems;
  6. Firewall technologies;

iii. Access and identity management technologies;

  1. Database audit and/or security tools; or,
  2. Behavioural analysis tools, log analysis tools, or audit tools;
  3.  In regards to employees and contractors, please advise as to the following:
  4. What technologies or business procedures do you have to ensure that individuals within your organisation will be monitored to ensure that they do not deliberately or inadvertently disclose personal data outside your company, through e-mail, web-mail or instant messaging, or otherwise.
  5. Have you had had any circumstances in which employees or contractors have been dismissed, and/or been charged under criminal laws for accessing my personal data inappropriately, or if you are unable to determine this, of any customers, in the past twelve months.
  6. Please advise as to what training and awareness measures you have taken in order to ensure that employees and contractors are accessing and processing my personal data in conformity with the General Data Protection Regulation.

Thank you,

Ian

Data portability in online dating sooner than they think?

Dating Apps make money from attention & personal data

I have written a few times about disruption in online dating, heck its something which will be discussed at Mozilla Festival this year (tickets are available now).

But interestingly the EU’s General Data Protection Regulation may get in there ahead of any setup/network disruption. In the Guardian I saw a piece called Getting your data out of Tinder is really hard – but it shouldn’t be.

Its all about getting data back from Tinder (which remember is part of IAC/Match group)

…Duportail eventually got some of the rest of her data, but only on a voluntary basis, and only after she identified herself as a journalist. Her non-journalist friends who followed suit never got responses to similar requests.

Finally armed with the 800 pages she had clawed back from Tinder, Duportail wrote a story reflecting on her own relationship with her data, and the myopic view Tinder had of her love life. I feel her story helps bridge the chasm between those with information stored in the database and the architects behind it, providing much needed neutral common ground to democratically discuss power distributions in the digital economy.

Given the popularity of her story, and my overflowing inbox, I would say many agree. And indeed, you should expect more similar stories to be unearthed in the future because of the upcoming General Data Protection Regulation (GDPR). From May 2018, the new European-level regulation will come into force, claiming wider applicability – including on US-based companies, such as Tinder, processing the personal data of Europeans – and harmonising data protection and enforcement by “levelling up” protections for all European residents.

I know there is a lot of push back from the big American internet corps, but this is coming and the there is no way they can wriggle out of it?

…beyond the much older right of access, the true revolution of GDPR will come in the form of a new right for all European citizens: the right to portability.

It seems like such a small thing but actually it has the potential to be extremely disruptive. Heck its one of the things I wanted back in early 2011. Imagine all those new services which could act like brokers and enable choice! It could be standard to have the ability to export and import rich data sets like Attention profile markup language (APML).

I just wish we were staying in Europe, although the UK has agreed to take GDPR, thankfully! There was no way, if they were left on their own, this would ever come about; like it looks like it might.

BBC Newsnight on Cambridge Analytica

https://www.youtube.com/watch?v=k6Vn45Xt3y8

Was Britain’s EU referendum hijacked by the American alt-right using a technique known as psychographics? Gabriel Gatehouse from BBC Newsnight reports on the data analytics firm Cambridge Analytica.

I’ve said so much stuff about this already but frankly “Overzealous PR?” is total laughable crap! I actually laughed quite a lot when I heard this. Its very clear they were involved (to one degree or not) and like a kid with their finger in the cookie jar, they got caught.

Baby steps forward for e-Residents

It was Chris Hernon who first pointed me at the news I knew would come sooner or later.

Its becoming one step easier to setup a business in Estonia under the e-residency programme. A programme I signed up for and got the go ahead for just recently.

One of the biggest issues was having a bank account in another country which you are not formally a part of. I understand the reasons but as the e-residency is a real digital identity and banking (Fintech) goes through changes its self; it makes sense that the two trends will create something new and exciting

Business banking is radically transforming for almost everyone on Earth. Estonia’s e-Residency programme has now partnered with the Finnish fintech company Holvi to provide borderless business banking to the borderless digital nation. This means a complete EU company with complete EU business banking (& a payment card) can be established entirely online.

Although I’m not planning to setup a business in Estonia anytime soon, this is exciting news and I look forward to hearing what comes next.

I almost feel like a quote from the Hacker manifesto is almost apt here.

Mozfest retreat in Tallinn?

Tallinn Mozretreat

Mozfest the festival I have been in involved with for the last 6 years; is a collaborative event and of course there is some overhead to the collaboration. But Mozilla have ways to work through the usual issues with collaboration; be it collaborative tools first or subverting github to manage the open calls. Its quite amazing…

But sometimes you need to bring people together across the many different timezones we inhabit. 2 years ago it was Scotland, last year it was Berlin and this year its Tallinn.

Of course I was wondering like many others. I heard some great things about the place but it wasn’t hot on my list of places to go. But some more research has turned up some great stuff including the e-resident which I first heard about from Alex DS.

Ahead of Brexit, statistics reveal that almost 1,000 Brits have now applied to be e-residents of Estonia. Applications from the UK are being made twice as frequently as before the referendum, following an initial surge from three to 51 applications per week. More than half of all applications from the UK, 534, have arrived since the vote, while 231 arrived in the same period beforehand. Based on current trends, it is likely the 1,000th British application for e-residency will arrive this week, as Article 50 is due to be triggered.

Elsewhere, a website has been set up by the e-residency programme for British entrepreneurs called howtostayin.eu which explains how startups, established businesses and freelancers can use Estonian e-residency to continue their operations in the EU without leaving the UK.

I wish I had done it earlier, as I’ll be doing this for sure now…

Interestingly I also found the p0rnhub insights for estonia while searching, which was fancinating but slightly #nsfw, so you were warned! I was going to send it around to some of the Mozfest orginaisers but couldn’t find a way to explain why it was interesting or relavent.

Government’s response to the second referendum

 

Brexit
I fianlly got to see the orginial in Bristol just recently

 

I signed the much talked about petition,“EU Referendum Rules triggering a 2nd EU Referendum;” a while ago and finally it was debated…

The response is…

The European Union Referendum Act received Royal Assent in December 2015, receiving overwhelming support from Parliament. The Act did not set a threshold for the result or for minimum turnout.

The EU Referendum Act received Royal Assent in December 2015. The Act was scrutinised and debated in Parliament during its passage and agreed by both the House of Commons and the House of Lords. The Act set out the terms under which the referendum would take place, including provisions for setting the date, franchise and the question that would appear on the ballot paper. The Act did not set a threshold for the result or for minimum turnout.

As the Prime Minister made clear in his statement to the House of Commons on 27 June, the referendum was one of the biggest democratic exercises in British history with over 33 million people having their say. The Prime Minister and Government have been clear that this was a once in a generation vote and, as the Prime Minister has said, the decision must be respected. We must now prepare for the process to exit the EU and the Government is committed to ensuring the best possible outcome for the British people in the negotiations.

So that’s it… it’s looking even less possible that the EU ref will be undone.

The nightmare is real.

The dream is real

We opened Pandora’s box and now have to deal with the negative consequences which will come in one form or another… Very fitting is the annaology of panadora box with the EU Referendum, I feel.

Today the phrase “to open Pandora’s box” means to perform an action that may seem small or innocent, but that turns out to have severely detrimental and far-reaching negative consequences.

 

Nostalgia is the enemy of progress?

Nostalgia: Nostalgia Shelf

I first heard this on the psytech podcast, as I’ve been thinking about the reasoning behind family members decision to leave the EU. As you’d expect its been said many times before and it seems Steve Jobs certainly wasn’t a fan.

Don’t get me wrong nostalgia has its place, but starting to wonder if its has a lot to blame for a lot of the ills of the world? Without saying so, I realise my argument following the study of how men prefer women who are not smarter than themselves; is entwined with this.

I understand, it’s very comfortable and it clearly makes people feel better in a forever changing world; conjuring up positive memory and providing that boost of positivity.

participants who were induced to feel nostalgic also expressed more optimism of the future.  This optimism is related to two other factors.  First, nostalgia makes people feel more socially connected to others.  This social connection boosts people’s positive feelings about themselves.  That increase in self-esteem then increases feelings of optimism.

This set of studies suggests that nostalgia can play a beneficial role in people’s lives.  When times are tough, it may seem as though things may never get better.  By focusing on positive times from the past, though, people may help themselves to be more connected to others, which can give them the resources to be more optimistic about the future.

Later on we go on to find the numbers not so great and context had a lot to play in this all.

But back to the question, is nostalgia getting in the way of progress? It seems maybe depending on too many factors.

My father likes watching old rerun shows. If it wasn’t for flicking between the news at 6pm and my mother’s enjoyment of soap operas, the TV might stay on ITV3 all the time (for those outside the UK, wikipedia describes ITV3 as a channel mainly aimed at the over-35 audience, and much of its output consists of reruns of older ITV drama series and sitcoms). It does wind and worry me a little. But I understand the nostalgia factor.

However I catch myself doing the same too. How many times have I watched Inception, Trance, Interstellar, etc? It’s not much different really, is it? or is it?

For all the films I do re watch, there’s a ton of films/tv I try to watch. Heck I have given some dog horrible films a try including sextape, tapped out, the do over, pressed, taking stock (although I did find it slightly funny and the stunning Kelly Brook stars in it)… I’ll have to check trakt.tv but the percentage of new to re-watches is quite high, from some rough and bad spreadsheet messing for 30mins on a train…

Out of a pool of 1540 films (going back to 2011!) I watched 1749 films. The average seems to be 0.6666666667? I very much realise my maths skills are pretty rubbish for this stuff, but if I was watching the same thing over and over again, it would be a much higher number. I was actually surprised at the high numbers of new vs re-watched.

Yes this is just media and I guess you could run the same thing with places I go to drink, work in the northern quarter, have brunch, etc, etc… Although most of us think of this as familiarity rather than nostalgia?

Nostalgia creeps in with culture of course. I already wrote about my feelings spending time in Japanese society and many thoughts Sherry Turkle has about the influence of technology in our lives. Its far too easy to say…

“Well we use to easier… to get a job for life in the past”

“You use to be able to… leave your front door open”

“I prefered it when… you could smoke while you worked”

Is this toxic? Its hard to say. But I certainly try to stop myself or caveat what I’m about to say, when I feel it coming up.

But I’m drawn because I’m also very aware we should also look to history to stop making the same mistakes again and again. Remember what a divided europe use to look like?