This rich introduction to the Privacy and Democracy track represents a compelling journey into the heart of democratic values and individual privacy rights, featuring high-level speakers from the Italian Institute for Privacy and Data Valorisation and the European Centre for Certification and Privacy. 

Introduction The concept of privacy can be found in many cultures. It has roots that extend far back in history across various cultural, political, and social traditions. This concept has especially reached legal milestones through the recognition and solidification of privacy and data protection as a fundamental human right in contemporary legal systems. With this engaging session, a...

South Africa is a prime location for genetics and genomic research due to its combination of genetic diversity, high disease burdens, and high-quality infra-structure. Most research projects of this nature, including in South Africa, are funded by organizations such as the United States National Institutes of Health (NIH), the European Commission, the United Kingdom Medical Research Council, and the Wel...

Introduction In democratic societies, the protection of individuals’ privacy is closely connected to the preservation of civil liberties, which in turn highlights the essential role that privacy rights play in sustaining democratic principles and fostering civic engagement. This enriching session will focus on the multifaceted ways in which privacy and democracy intersect, shaping the...

The concept of personal data is pivotal to understand the scope of the General Data Protection Regulation (GDPR). Since data protection regulations and directives were adopted, national courts and the Court of Justice of the European Union (CJEU) had to determine whether some data like IP addresses are personal. Courts' rulings are often based on the possibility to re-identify individuals from the datasets under dispute. The differe...

Introduction The new wave of European regulations is directly impacting and redefining the role of the DPOs. In parallel, new standards are emerging to specify the qualification requirements of DPO and data protection professionals. Whether you are a DPO or a data compliance professional seeking to enhance your experience, or an organization aiming to strengthen your data protection s...

After the most acute phase of the Covid-19 pandemic has passed, it is clear that the healthcare system will increasingly exploit the advantages of Internet of Things technologies: distance-vitals-monitoring and telemedicine are just two of the concrete applications, rehabilitation through exoskeletons or exergames are the next great barrier shattered in the field of home healthcare. Despite these perspectives, challenges remain for ...

The foundation of GDPR compliance lies in clearly defined legal bases for the processing of personal data. While the appropriate application of Article 6 and 9 of the GDPR to standard processing activities is sometimes already difficult, these challenges vastly increase when applied to AI training. The complex data processing activities involved therein, as well as the concrete personal data that is collected and used, turn GDPR-com...

Introduction In this session, the panel explores the opportunities and challenges of fostering cooperation among DPO federations across Europe and beyond. By connecting expertise, resources, and networks, these federations play a crucial role in promoting best practices, facilitating knowledge, and advocating for strong data protection frameworks on a global scale.  

This study examines the varying interpretations of data portability across different legislative frameworks. While each jurisdiction labels the concept as “portability", the underlying understanding of what constitutes portability significantly differs. This divergence in conceptualization, rather than mere definitional variation, not only leads to substantial confusion, but also affects the enjoyment of rights and obligations of re...

Location: Scuola Grande di San RoccoIntroduction Privacy and democracy are pillars of modern society, both of which shape the contours of individual freedoms, social values, and governance structures. This session will focus on perspectives regarding privacy and democracy, by giving the floor to several authorities and high-level spea...

Introduction Digital transformation is heading towards growing data integrations in the form of large-scale data spaces. In line with the European data space strategy, this session will discuss the implications in terms of privacy and data protection, as well as present insights from European research projects, such as AD4GD and IDEA4RC. The panel will provide guidance on how to best ...

Introduction While data protection regulations are adopted by a growing number of countries, there are some divergences in their adoption. Some jurisdictions also question the universal nature of the rig...

Introduction While research on data protection was traditionally, relatively, and jurisdictionally agnostic, the worldwide development of national and regional data regulations is paving the way to a new field of research, which requires international cooperation. The need for solid infrastructure to support research efforts is a direct result of the volume and complexity of data whic...

Although the number of smart home users is increasing, privacy regulations such as the GDPR exempt data collected from household environments for personal use. Previous research has considered how smart homeowners might be seen as joint data controllers due to the amount of data available to them. The self-surveillance capabilities of smart homes allow homeowners to generate personal data both regarding themselves and people in...

Introduction Democratic societies must address dual obligations: to protect their population and to preserve the fundamental rights of their citizens. They seek to balance national security interests wit...

Network information systems are turned into a commodity. Virtually all businesses depend on their trustworthy and reliable function. Hence, we observe an increasing demand of ICT professionals with operationalizable knowledgeable in IT security and privacy.This closing panel of our scientific track aims to explore the challenges and opportunities in preparing the future workforce with the necessary skills to address privacy and cybersecurity threats effectively.To this end, th...

Introduction The evolution of Earth observation allows to collect more and more granular data. Satellites, drones, and other technologies are capturing increasingly detailed imagery of our planet, which raises new questions on how to preserve privacy and ensure data protection by design and by default. It also raises challenges in terms of data subject rights, such as the right to acc...

Introduction As Europe continues to strengthen its cybersecurity framework in response to evolving threats and challenges, understanding the intricacies of this legislative landscape is essential for org...

Introduction This session will wrap up the track on privacy and democracy, by reflecting on the key insights, trends, and challenges discussed over the course of the sessions on privacy and democracy.  Key questions and objectives What is the main takeaway on privacy and de...

Introduction This session will wrap up the track on making data secure, by sharing perspectives on priority strategies to address cybersecurity challenges.  Key questions and objectives What is the main takeaway on making data secure?How...

Introduction This session will discuss major national data regulation developments, with a focus on British, Canadian, and Indian regulations. Key questions and objectives What are the implications of these regulatory evolutions?  

Introduction This session will explore regulatory frameworks and best practices in terms of video surveillance. It will explore the ethical, legal, and technical considerations that should be taken when applying video surveillance, exploring ways for reducing privacy risks without compromising security goals.  Key questio...

Introduction Most companies perceive compliance with data protection regulations as a source of costs. This session will explore a new perspective: how to turn compliance into a source of economic and financial value creation, and how to move from cost to investment perspective. This session also focuses on the relationship between compliance efforts and their financial and economic e...

Introduction This session provides an in-depth analysis of the recent evolution and current status of cross-Atlantic data protection collaboration and convergence. It will discuss the challenges and opportunities for both regions to overcome their differences and develop common frameworks. The panel will consider the common interests and interdependencies of the two regions and their ...

Introduction In pursuit of scientific research advancement, effective data sharing practices are essential. This session discusses the innovative solutions for facilitating data sharing in scientific research across local, national, and international contexts, by exploring best practices and emerging technologies. Through this panel discussion, attendees will gain practical strategies...

Introduction In an era of heightened regulatory control and evolving expectations, establishing solid compliance accountability mechanisms and transparent reporting practices is essential to build credibility. This expert-led session will explore the aspects of compliance accountability and reporting, offering insights into best practices, challenges, strategies, and solutions to enha...

In un' era in cui i dati sono diventati il nuovo petrolio, è fondamentale comprendere come le normative stanno cambiando e cosa significa per le aziende, le istituzioni e i cittadini europei. In qualità di esperti di Asso Dpo in  questa sessione parleremo dei punti chiave della European Digital Strategy e delle nuove legislazioni europee che impattano sul trattamento dei dati.AI ACT: Come la "fame" di d...

Introduction We live in a world defined by unprecedented data flows and digital interconnectedness, which means that protecting personal information across borders has become a pressing concern. This session focuses on the progress in terms of multilateral data protection, with a focus on three major international organizations: the Council of Europe, the OECD, and the UN.  ...

Introduction With the increasing digitization of healthcare information, finding a balance between data accessibility and individual privacy rights is crucial. Academics and experts on this panel will explore approaches to sharing health data while prioritizing privacy and security. In addition to this, attendees will discover cutting-edge strategies and frameworks designed to facilit...

Introduction This session will analyze the policies, initiatives, and collaborative efforts undertaken by G7 member countries to establish solid frameworks that prioritize individuals’ privacy rights, while maintaining innovation and economic growth. The attendees will explore the challenges, responsibilities, opportunities, and aspirations in building a world where privacy and data r...

Introduction While national regulations are impacting data processing activities and data flows, international research seems to be more and more needed. This session will focus on the needs and opportunities to develop international cooperation to support research in privacy and data protection. It also aims to identify practical actions to move forward and set the basis of an intern...

Introduction Data protection is essential. This session will explore inspiring use cases of data processing for good. The transformative power of data could drive positive social impact and advance humanitarian causes. From using data analytics for disaster response to studying insights for sustainable development goals, the speakers on this panel will explore inspiring and innovative...

Introduction Through insightful discussions and comparative analyses, speakers in this session explore the dynamic landscape of data protection regulations and practices at regional levels. They will also discuss various regional perspectives, from Asia-Pacific to Africa and Latin America, as well as present a comprehensive view on ongoing regional evolutions, commonalities, and disti...

Introduction This session is dedicated to exploring tangible strategies and frameworks for fostering international cooperation in research in the field of data protection. From joint research programmes and calls, to mutualizing research infrastructures and expertise, the participants will discuss potential actions that could enhance collaboration across borders to drive forward meani...

Introduction The regulatory landscape, ethical considerations and best practices are outlined by EU-CHECK to ensure responsible and trustworthy AI applications. In this session, attendees will gain valuable insight into the European Union’s Coordinated Universal Compliance for Keeping User Privacy and Security perspective, especially in the context of AI deployment. The speakers will ...

Introduction In this session, discover how international cooperation and mutual assistance are reshaping the landscape of privacy regulation in order to uphold digital rights and combat global privacy threats. Experts on the panel will uncover the mechanisms, limits, and triumphs of collaborative privacy enforcement cooperation efforts, paving the way for a safer digital future. ...

Introduction In humanitarian crises, every bit of information can be a lifeline for those in need, which makes data a vital factor in providing food, shelter, and basic human needs. In this session, the speakers will explore the fascinating relationship between data protection and humanitarian action, from aiding disaster response to tracking displacement trends, where data plays a cr...

Introduction The right to private communication is enshrined in several international treaties in the telecommunication, human rights, and humanitarian law domains. Quantum technology is expected to be soon able to uncypher encrypted communications. It poses a threat on conventional encryption methods and will constitute a major blow on confidentiality and privacy of electronic commun...

Introduction The EU GDPR makes over 70 references to certification, and its Article 42 sets the basis for a European Data Protection Seal. In October 2022, the European Data Protection Board approved the Europrivacy criteria to serve as European Data Protection Seal. In March this year, European Accreditation validated the accreditation of Europrivacy at European level in line with Ar...

While the EU–U.S. Data Privacy Framework, OECD Gov’t access principles and G7 Data Free Flows with Trust Initiative have paved the way for democracies to find common ground and cooperate on challenging data sharing issues, there are still gaps to fill and issues to solve. Law enforcement agencies worldwide are battling with a cumbersome process to investigate and prosecute cross border crime, while companies grapple with their ...

Introduction While the GDPR has established a powerful mechanism to reinforce cooperation for data protection among EU an EEA Member States, major European countries, such as UK, Switzerland, and others, are not associated to this cooperation mechanism. They often benefit from adequacy decisions but are not involved in EDPB discussions. This session will explore the potential to reinf...

Introduction Data regulation is essential, not to mention critical, in the financial sector. With the introduction of key regulatory frameworks, such as the Digital Operational Resilience Act (DORA), the Markets in Crypto-Assets Regulation (MICA), and specialized tools tailored for DPOs, navigating compliance has never been more needed. With the industry experts in this session, gain ...

Introduction In this engaging session, the speakers explore the imperative of fostering international cooperation for data protection and privacy. High-level authorities will share their views on the ways to reinforce international cooperation and convergence in data protection. They will discuss identified challenges and opportunities to build an ocean of privacy that overcomes regio...

Introduction Data protection and international trade are increasingly interleaved. The traditional doctrine consisted in dissociating the two topics. However, current WTO negotiations on electronic services highlight inherent connections and interdependencies between trade and data protection. The panel will explore how trade agreements and policies intersect with data protection fram...

IntroductionEnsuring age appropriate experiences is an important element to help protect the privacy and safety of users. However, effective age assurance presents a variety of challenges. This session combines a Google presentation and an interactive, mock session on how research shapes the implementation of age assurance with an expert panel to explore and discuss the latest technologies...

Introduction The number of compliance regulatory frameworks is getting higher and higher, which can often feel like navigating a maze of rules and requirements. However, compliance sandboxes offer opportunities for innovation to stay ahead of the curve. This session explains the concept of compliance sandboxes, which is a controlled environment where regulators and industry experts co...

Introduction The speakers on this panel will embark on a comprehensive exploration of the diverse mechanisms available to safeguard data, such as Certification, Standard Contractual Clauses (SCC), Binding Corporate Rules (BCR), and Codes of Conduct (CC). With the use of digital technologies and cross-border data flows, organizations and professionals face mounting pressure to adapt sa...

Introduction Supervisory Authorities play a crucial role in providing guidance and resources to facilitate compliance, and this session highlights their cutting-edge initiatives and tools to achieve that. The panel will unveil the latest innovative tools developed by these authorities to support compliance efforts and enhance regulatory transparency. Attendees will learn about ho...

Introduction Dive into the dynamic realm of data protection compliance, where the only constant is change. In this session, the speakers will embark on a journey to further explore regulatory evolution, focusing on how compliance can be navigated while staying afloat in shifting tides. They will also unravel the complexities of regulatory frameworks, challenges, and strategies towards...

Introduction With the proliferation of artificial intelligence technologies, challenges are inevitable to ensure that data practices comply with evolving legal requirements while utilizing the potential of AI innovation to the maximum capacity. With this session, the speakers will explore the integration of AI legal frameworks into data protection compliance programs. 

Introduction In this compelling session, the speakers will explore the complexities surrounding the management of personal data belonging to moving people, such as migrants, travelers, and patients. Just like individuals cross borders, their personal data moves with them, raising significant challenges and opportunities for data protection. The speakers will focus on the multifaceted ...

Introduction As cities worldwide embrace innovative technologies to enhance sustainability and quality of life, it is important to include data protection principles in the fabric of urban development. In this session, high-level speakers will shed light on how smart cities and public administrations ensure data protection by design. They will also share lessons learned and good pract...

Introduction This session will present views on the risks and opportunities associated with artificial intelligence, by giving the floor to senior experts and authorities from the European Data Protection Supervisor (EDPS), European Parliament, Commission nationale de l'informatique et des libe...

Introduction Different EU regulations have adopted distinct provisions related to consent. This session will discuss the practical implications of consent management under the Digital Markets Act (DMA), GDPR, and ePrivacy Directive. Using examples, such as consent paywall implementation, the speakers on this session’s panel will explore how to navigate the complexities of ob...

Introduction Governments around the world are dealing with evolving threats and challenges, which makes it crucial to critically assess the legitimacy of security measures and their impact on civil liberties. This session offers insights into the principles, practices, and ethical considerations of the assessment of legitimate aims and proportionality in national security, exploring t...

Introduction With the Digital Markets Act (DMA) shaping the rules governing online platforms, businesses must adapt to new compliance requirements in this evolving regulatory environment. This session offers a deep dive into the DMA’s provision, their potential impact, and strategies for ensuring compliance in a rapidly changing regulatory world.  

Introduction With the adoption of AI-related regulations, this session focuses on the critical imperative of making AI trustable, transparent, understandable, and accountable, as it continues to be integrated in various aspects of society. The speakers will explore strategies and practices for achieving these goals, by empowering organizations and professionals to benefit from the ful...

Introduction This deep dive-in session will present, step by step, the data protection certification journey in practice, with senior experts explaining the procedure to certify data processing activities with the European Data Protection Seal (Europrivacy) under Art. 42 GDPR. They will illustrate the detailed process of moving from compliance to certification, as well as the benefits...

Introduction This session offers an outstanding opportunity to learn how the US regulation on privacy and data protection work, with a focus on the Data Protection Framework in Practice. This deep dive-in session organized by the US Department of Justice will be delivered by senior representatives and experts, who will present the framework, clarify potential misperceptions, and addre...

Introduction All democratic regimes recognize both the need to protect fundamental rights of its citizens, while ensuring that authorities can enforce law and protect their citizens against threats, such as terrorist attacks. There is an increasing awareness of the need to balance public interest and fundamental rights. How do government agencies in democratic countries ensure the rig...

Introduction Generative AI drives innovation in various sectors, but compliance with the GDPR presents both future challenges and future opportunities. In this session, the speakers will analyze the relationship between generative AI and the GDPR, in addition to presenting pathways for using generative AI while highlighting best practices, legal considerations, and ethical application...

Introduction Under European law, Transfer Impact Assessment is mandatory when transferring personal data in third world countries that are not recognized as adequate. It is the responsibility of the data controller to perform the transfer impact assessment and to assess, for instance, the legal framework of third world countries. This session will focus on practical guidance to perfor...

The panel will delve into the intersection of data protection and sustainable AI development. Panelists will examine critical topics such as the legal implications of publicly available data usage, the role of synthetic data in shaping AI's future, strategies for sustainable Generative AI, and broader considerations of fairness, privacy, and policy in AI innovation. The panel will also serve as the platform for the launch of th...

Introduction The panel of this session will examine the significance of cross-border accountability in the field of data processing, in order to ensure accountability and demonstrate compliance with data protection regulations. The speakers will discuss and compare available mechanisms, practices, and regulatory frameworks for enhancing transparency in these activities.  

IntroductionImagine this: A multinational company grappling with an unexpected ransomware attack. Stakeholders are on edge, the clock is ticking, and swift decisions are paramount. This isn't just a test of your expertise, but also a measure of how well you can handle pressure, make crucial decisions with your team, and lead during chaos.Key Questions and objectivesThis is a unique dive into a cyber crisis scenario mirroring the comple...

Introduction Experts of this panel will challenge the notion that compliance and accountability must be tedious or burdensome. With today’s regulatory frameworks, compliance can be transformed into an advantage by embracing innovative approaches and fostering a culture of accountability. This session explores practical strategies, stories, and practices for making compliance and accou...

Introduction An increasing number of regulations are being adopted in diverse jurisdictions to regulate artificial intelligence and address the challenges and opportunities presented by this transformative technology. This session will discuss AI evolution, with a particular focus on the convergences and divergences among regulations. Are we heading towards similar rules? The speakers...

While users value personalization, they also want brands and platforms to be responsible and transparent about data practices. Privacy-enhancing technologies will be critical to maintaining user expectations regarding both privacy and utility of digital marketing. Trusted execution environments (TEEs) are a form of PET often used to protect sensitive information such as passwords and credit card numbers. They can also be used to improve data privacy while still providing utility, by allowing ...

Introduction The ethical considerations surrounding the design of technology and its implementation have never been more crucial. This session explores the proactive integration of ethical principles in the development of the design of technological innovations, ensuring that it serves the common good while it reduces potential harm. From AI algorithms to data privacy protocols, atten...

Introduction The Court of Justice of the European Union (CJEU) stands as a central pillar in shaping legal frameworks across the European Union. In this keynote address, attendees will learn about the profound influence the CJEU exerts on European jurisprudence, and explore its crucial role in interpreting EU law, resolving disputes, and protecting fundamental principles of the Union,...

Join professionals and experts from esteemed institutions united in the commitment to upholding the highest standards of data integrity and privacy in the medical field. This Track sets the stage for enlightening discussions, insightful presentations, and collaborative exchanges aimed at fostering compliance excellence in healthcare data management.  

Introduction In recent years, data protection certification has emerged as a new mechanism for demonstrating compliance with the regulation. The European Data Protection Seal under Art. 42 GDPR has recently been unlocked in Europe, and other jurisdictions are adopting similar regulations. This session will review and discuss lessons learned from privacy and data protection certificati...

Introduction Recent years have seen the emergence of regional and international data protection certifications, including the European Data Protection Seal in Europe and the Global CBPR. This session will discuss the opportunities and challenges for international convergence and interoperability in terms of data protection certifications.  

This workshop is designed to practice the conformity assessment procedure of AI systems in accordance with the emerging AI Act. The workshop is structured to provide theoretical knowledge and hands-on experience, focusing on the Act's obligations and requirements concerning intended use, data governance, transparency, and the technical and organizational measures implemented to ensure compliance.Workshop Activities:Introduction to the AI Act: The facilitators present...

Introduction This session will focus on the secondary use of data in the health and medical sector, with a special focus on the needs and challenges of practitioners, including in the medical research domain. From healthcare to research and beyond, the speakers on this panel will offer an insight into the evolving needs, barriers, considerations, frameworks, and challenges associated ...

Introduction Following last year's discussion, this session will discuss and explore the possibility to support convergence and interoperability in the field of data protection certification between three major international data protection normative frameworks: Convention 108+ of the Council of Europe, the EU GDPR, and the Global CBPR Forum. It will also explore and discuss different...

Introduction This session will discuss and compare the value of synthetic data, pseudonymized data, and anonymized data for medical research. Beyond the ethical dimension and their relevance for data protection by design, the session will discuss their relevance for medical research.  Key questions and objectives ...

Introduction This session will focus on discussing and exchanging lessons learned and good practices in the domain of democratic oversight of national security. Effective oversight mechanisms are essential to protecting democratic principles, protecting human rights, and ensuring accountability in security operations. This session brings together experts and practitioners to share exp...

Introduction Medical research often requires accessing large data sets from various geographic regions to avoid any bias in the results. This session will discuss the needs, opportunities, and challenges for sharing medical data beyond borders. The EHDS provides a mechanism for such international cooperation. How will it work in practice? What are the constraints in other jurisdiction...

Introduction Since the implementation of the GDPR, individuals have been granted enhanced rights and protection regarding their personal data. However, in cases of data breaches or non-compliance, affected parties may seek compensation for damages. This crucial session is dedicated to exploring GDPR-related damage compensation, legal frameworks, precedents, and challenges regarding th...