While users value personalization, they also want brands and platforms to be responsible and transparent about data practices. Privacy-enhancing technologies will be critical to maintaining user expectations regarding both privacy and utility of digital marketing. Trusted execution environments (TEEs) are a form of PET often used to protect sensitive information such as passwords and credit card numbers. They can also be used to improve data privacy while still providing utility, by allowing ...

This rich introduction to the Privacy and Democracy track represents a compelling journey into the heart of democratic values and individual privacy rights, featuring high-level speakers from the Italian Institute for Privacy and Data Valorisation and the European Centre for Certification and Privacy. 

Introduction The concept of privacy can be found in many cultures. It has roots that extend far back in history across various cultural, political, and social traditions. This concept has especially reached legal milestones through the recognition and solidification of privacy and data protection as a fundamental human right in contemporary legal systems. With this engaging session, a...

Introduction The constant and rapid evolution of the digital landscape directly influences the roles and responsibilities of professionals tasked with safeguarding data privacy and ensuring regulatory compliance. This is especially highlighted by recent EU legislations, such as the Digital Services Act, Digital Markets Act, Data Act, Data Governance Act, together with European Data Sp...

Introduction In democratic societies, the protection of individuals’ privacy is closely connected to the preservation of civil liberties, which in turn highlights the essential role that privacy rights play in sustaining democratic principles and fostering civic engagement. This enriching session will focus on the multifaceted ways in which privacy and democracy intersect, shaping the...

Most of the global initiatives in the field of artificial intelligence are designed as globally-minded soft regulation. “Soft” law or the Brussels Effect can complement but will not be able to replace “hard” law. In the case of AI, a technology that has the potential to revolutionise our society, what will make the difference is the enforceability of the law. In the EU’s AI Act, the EU co-legislators make a wise choice to depart fro...

The foundation of GDPR compliance lies in clearly defined legal bases for the processing of personal data. While the appropriate application of Article 6 and 9 of the GDPR to standard processing activities is sometimes already difficult, these challenges vastly increase when applied to AI training. The complex data processing activities involved therein, as well as the concrete personal data that is collected and used, turn GDPR-com...

Introduction The revised Convention 108 of the Council of Europe is being ratified by a growing number of countries. It will soon reach the required threshold to trigger the entry into force of the convention, as well as bring a paradigm shift in the landscape of global data governance. This session will discuss the key implications of this treaty, in addition to its role in shaping t...

Location: Scuola Grande di San RoccoIntroduction Privacy and democracy are pillars of modern society, both of which shape the contours of individual freedoms, social values, and governance structures. This session will focus on perspectives regarding privacy and democracy, by giving the floor to several authorities and high-level spea...

Introduction Experts on this panel will investigate the latest developments in Privacy Enhancing Technologies by examining their effectiveness in protecting user data and fostering trust in online environments. The panel will also address the emerging trends and evaluate their potential impact on privacy landscapes, which is helpful in navigating the ever-evolving terrain of privacy r...

Although the number of smart home users is increasing, privacy regulations such as the GDPR exempt data collected from household environments for personal use. Previous research has considered how smart homeowners might be seen as joint data controllers due to the amount of data available to them. The self-surveillance capabilities of smart homes allow homeowners to generate personal data both regarding themselves and people in...

Introduction As Europe continues to strengthen its cybersecurity framework in response to evolving threats and challenges, understanding the intricacies of this legislative landscape is essential for org...

Introduction This session will wrap up the track on privacy and democracy, by reflecting on the key insights, trends, and challenges discussed over the course of the sessions on privacy and democracy.  Key questions and objectives What is the main takeaway on privacy and de...

Introduction This Welcome Reception invites you to discover the Privacy MelodIA: An original musical composition on data protection, performed in an outstanding setting and surrounded by the largest collection of Tintoretto’s paintings. 

The International Cooperation track serves as platform for dialogue, exchange, and collaboration, where we get to explore innovative solutions and build meaningful partnerships beyond borders and across various disciplines. This session offers an introductory discussion that brings together an esteemed panel of high-level speakers and experts, such as the Italian Minister of Justice, US Federal Trade Commissioner, Pr...

Introduction This session will discuss major national data regulation developments, with a focus on British, Canadian, and Indian regulations. Key questions and objectives What are the implications of these regulatory evolutions?  

Introduction This session provides an in-depth analysis of the recent evolution and current status of cross-Atlantic data protection collaboration and convergence. It will discuss the challenges and opportunities for both regions to overcome their differences and develop common frameworks. The panel will consider the common interests and interdependencies of the two regions and their ...

Introduction We live in a world defined by unprecedented data flows and digital interconnectedness, which means that protecting personal information across borders has become a pressing concern. This session focuses on the progress in terms of multilateral data protection, with a focus on three major international organizations: the Council of Europe, the OECD, and the UN.  ...

Introduction The panel of this session will examine the dynamic interplay among various European Data Regulations, including the Digital Markets Act (DMA), Digital Services Act (DSA), Data Act (DA), Artificial Intelligence Act (AIA), and Market in Crypto-assets Regulation (MICA). It will also focus on unraveling the complexities surrounding these regulations and offer insights into ov...

In an increasingly AI-driven world, we need effective tools to navigate the intersection of data privacy and technology. This session explores the dynamic landscape of privacy, cross-border data transfers, and the impact of artificial intelligence. We’ll delve into whether a trust gap exists and examine how those concerns are being addressed from a global regulatory perspective. We will also discuss practical steps that organizations can take to foster trust through privacy.

Introduction Through insightful discussions and comparative analyses, speakers in this session explore the dynamic landscape of data protection regulations and practices at regional levels. They will also discuss various regional perspectives, from Asia-Pacific to Africa and Latin America, as well as present a comprehensive view on ongoing regional evolutions, commonalities, and disti...

Introduction There has been an emerging innovative approach to marketing in the digital realm that utilizes the concept of privacy by design. In this session, attendees will discover this approach, especially regarding online marketing that prioritizes user privacy from the outset. From data minimization to transparent consent mechanisms, the speakers will unveil strategies for buildi...

Introduction The EU GDPR entered into force on 24 May 2016 and is applicable since 25 May 2018. It had a worldwide impact and triggered the adoption of many similar regulations across the world. This session will explore the lessons learned. What has been successful and what could be considered for future regulatory evolution? Join top-level authorities and experts for an insightful e...

Introduction In humanitarian crises, every bit of information can be a lifeline for those in need, which makes data a vital factor in providing food, shelter, and basic human needs. In this session, the speakers will explore the fascinating relationship between data protection and humanitarian action, from aiding disaster response to tracking displacement trends, where data plays a cr...

Introduction Global challenges increasingly transcend national borders, which means that the development and adoption of codes of conduct offer a promising avenue for fostering cooperation, promoting ethical standards, and addressing shared concerns across diverse sectors. The speakers will explore the transformative potential of international codes of conduct, by providing real-world...

Introduction Concerns over data privacy and market concentration have intensified over time, which makes regulatory compliance more extensive to encompass competition policy and privacy protection. This session will explore key EU legal principles related to PET, examining how practices such as user profiling, tracking, and targeted a...

Introduction In this engaging session, the speakers explore the imperative of fostering international cooperation for data protection and privacy. High-level authorities will share their views on the ways to reinforce international cooperation and convergence in data protection. They will discuss identified challenges and opportunities to build an ocean of privacy that overcomes regio...

IntroductionEnsuring age appropriate experiences is an important element to help protect the privacy and safety of users. However, effective age assurance presents a variety of challenges. This session combines a Google presentation and an interactive, mock session on how research shapes the implementation of age assurance with an expert panel to explore and discuss the latest technologies...

Introduction Dive into the dynamic realm of data protection compliance, where the only constant is change. In this session, the speakers will embark on a journey to further explore regulatory evolution, focusing on how compliance can be navigated while staying afloat in shifting tides. They will also unravel the complexities of regulatory frameworks, challenges, and strategies towards...

Introduction This session will discuss the interplay between data protection and economic development. It will try to move beyond position statements, to explore the facts and evidence of such interplay and potential trade-off. Is privacy limiting or accelerating economic development? What are the risks and economic impact on countries that do not provide high-level standards for...

Introduction Different EU regulations have adopted distinct provisions related to consent. This session will discuss the practical implications of consent management under the Digital Markets Act (DMA), GDPR, and ePrivacy Directive. Using examples, such as consent paywall implementation, the speakers on this session’s panel will explore how to navigate the complexities of ob...

Introduction From the GDPR to the ePrivacy Directive and beyond, Europe has established a comprehensive regulatory framework for data processing, some of which have their own implementation scheme with dedicated bodies. This session will discuss data regulations interplay and oversight in practice. Key questions and objectives...

Introduction Generative AI drives innovation in various sectors, but compliance with the GDPR presents both future challenges and future opportunities. In this session, the speakers will analyze the relationship between generative AI and the GDPR, in addition to presenting pathways for using generative AI while highlighting best practices, legal considerations, and ethical application...

While users value personalization, they also want brands and platforms to be responsible and transparent about data practices. Privacy-enhancing technologies will be critical to maintaining user expectations regarding both privacy and utility of digital marketing. Trusted execution environments (TEEs) are a form of PET often used to protect sensitive information such as passwords and credit card numbers. They can also be used to improve data privacy while still providing utility, by allowing ...