This is the Daily Tech News for Wednesday, November 19th, 2025.

We tell you what you need to know.

We give you important context and we try our darndest to help each other understand.

Today, thieves don't want your Samsung phone.

And the EU publishes the details on its changes to GDPR. One you need to know, one you want

to know. I'm Tom Merritt. And I'm Sarah Lane. Let's start with what you need to know with the big

story. So a lot of people have been having opinions about this before it came out, but I thought

it was good to wait to talk about it

until it's actually published. That is the changes to GDPR that are being proposed by the European

Commission. It published its digital omnibus with proposed changes not only to the 2018 GDPR

general data protection regulation, but also to the AI Act of 2024.

So for those who don't know, currently GDPR requires that you need a specific lawful reason

if you want to process personal data. When you process it, that data has to be encrypted.

The user has a right to get a copy of it,

and the user can ask you to delete their personal data. And the big one, consent to process any

personal data must be freely given, specific, informed, and unambiguous. That's why you have so many

cookie pop-ups that are very complicated. Well, they want to change that.

They want to make it easier to share anonymized and pseudonymized data sets.

That's where you change the names.

You don't just remove the names.

That would allow processing of special categories of personal data for ensuring bias detection

and correction subject to appropriate safeguards.

...