How do you advocate for science?

(upbeat music) - First, what is GDPR? Global Data Privacy Regulation. The easiest way to think about it is, if it's your data, what would you expect about your data? First, you should know how people are using it. Second, how should you take it back? What if you don't want somebody using it? What if it gets used for abuse? How do you think about those things? That's kind of the broad arc of it.

Under that is this question of actually how do you implement these things? What does it mean to have a right to be forgotten, or lost, and take my data back? All these different things. That's the quintessential robust part of it. The place where this is going to be a big challenge is the actual implementation because many of these systems were designed without thinking about a world of GDPR. There's also questions of how people might abuse GDPR. Somebody who may have a bunch of things written about them that are factual, but want to remove it, obliterate it from the record, can use GDPR potentially to do that.

How do you make sure that that doesn't happen? But also, in this case of the questions of, well what does it mean when, if you and I are both on a system and we're both commenting on it and interacting, and then you say hey, I'm gone, I don't want my data. But I'm saying hey, I'm still okay there, but that conversation now is one sided 'cause there's only your comments, nobody else's. These systems need to be thought through and so this is very early days of what does it look like as the next phase of protections around data.

(upbeat music)