
Pierre-Yves Lastic
Pierre-Yves has 17 years of experience in privacy and personal data protection. He is currently Vice-President of the French Union des DPO (UDPO) and an active member of the European Federation of DPO (EFDPO), as well as consultant for Privacy and Information Management in Life Sciences.
He was Global R&D Privacy Officer at Sanofi for 8 years before being appointed Chief Privacy Officer in 2013, setting up Sanofi Global Privacy Office.
He studied Biology, Languages and Computer Sciences in France and Germany, and holds a PhD in Biology from Bayreuth University. He has nearly 30 years of experience in the pharmaceutical industry in a number of management functions including Data Management, Statistics, Clinical Trials Management, Electronic Regulatory Submissions, Information Management, Privacy and Personal Data Protection.
Pierre-Yves was member of the Board of Directors of the International Pharmaceutical & Medical devices Privacy Consortium (IPMPC) from 2005 to 2019 and was a member of the Board of Directors of the Clinical Data Interchange Standards Consortium (CDISC) from 2004 to 2016.
As a data standards and privacy expert, he was a member of the EudraVigilance Expert Working Group as well as the Telematics Implementation Group of the European Medicines Agency (EMA).
He also teaches Data Management at the European Centre of Pharmaceutical Medicine (ECPM) in Basel as well as Personal Data Protection at Université Panthéon-Assas (Paris II).
He is also a member of the steering committee of Master in Personal Data Protection of the Mines Telecom Paris Business School.
Sessions in which Pierre-Yves Lastic participates
segunda-feira 17 abril, 2023
Five years after GDPR came into effect, thousands of new Data Protection Officers have been nominated, however, their level of proficiency is extremely variable. Moreover, some countries, like Germany have had DPO for many decades where others, especially recent EU members only introduce the role a few years ago. The need to recruit, train and educate DPO is therefore very high as well as very different across European countries.
quarta-feira 19 abril, 2023
The role of the Data Protection Officer has greatly evolved since the nomination of the first DPO in the Land of Hesse, Germany in 1971. Originally designed to protect citizens privacy against too much scrutiny from the state, it shall now protect people from the invasive curiosity of private companies, large and small, as well as from increasingly active criminal organizations. New EU regulations aim at controlling large internet actors with the Digital Services Act and the Data Marketing...
sexta-feira 21 abril, 2023
segunda-feira 10 junho, 2024
Introduction The constant and rapid evolution of the digital landscape directly influences the roles and responsibilities of professionals tasked with safeguarding data privacy and ensuring regulatory compliance. This is especially highlighted by recent EU legislations, such as the Digital Services Act, Digital Markets Act, Data Act, Data Governance Act, together with European Data Sp...
Introduction In this session, the panel explores the opportunities and challenges of fostering cooperation among DPO federations across Europe and beyond. By connecting expertise, resources, and networks, these federations play a crucial role in promoting best practices, facilitating knowledge, and advocating for strong data protection frameworks on a global scale.
sexta-feira 14 junho, 2024
Introduction This session will review the interplay among European regulations for health and medical data. The panel will discuss how the regulatory framework shapes the future of medical research and innovation, with a special focus on the interplay between the AI Act, Medical Device Regulation (MDR), and the European Health Data Space (EHDS), and their collective impact on medical ...
Introduction This session will discuss and compare the value of synthetic data, pseudonymized data, and anonymized data for medical research. Beyond the ethical dimension and their relevance for data protection by design, the session will discuss their relevance for medical research. Key questions and objectives ...
Introduction Medical research often requires accessing large data sets from various geographic regions to avoid any bias in the results. This session will discuss the needs, opportunities, and challenges for sharing medical data beyond borders. The EHDS provides a mechanism for such international cooperation. How will it work in practice? What are the constraints in other jurisdiction...
quinta-feira 15 maio, 2025
Patients trust healthcare providers with their most sensitive data, but are their rights truly being upheld in practice? From the right to access medical records to the challenge of data portability and consent management, ensuring compliance becomes not only a legal requirement but also an ethical responsibility. This session tackles the real-world struggles of ensuring data subjects’ rights in the healthcare system and explores practical soluti...
sexta-feira 16 maio, 2025
This unique session explores the evolving responsibilities of DPOs in the field of AI governance, focusing on the challenges, ethical dilemmas, and opportunities that come with overseeing AI systems that may impact personal data. Join the panel for a forward-thinking discussion about how DPOs can steer the future of AI governance while staying true to their core mission of data protection.
The age of generative AI is one where machines can write, create, and predict with astonishing accuracy. Still, this brings new privacy challenges as AI plays a powerful role in our lives. This session will discuss the Gen AI Code of Practice, defined as a set of guidelines that aims to govern the use of generative AI while protecting privacy rights. The panel will explore what a solid and actionable code of practice looks like and how DPOs can p...
Sessions in which Pierre-Yves Lastic attends
segunda-feira 17 abril, 2023
The Welcome Desk to collect your badge and conference bags is available from 8:30 am to 5:30 pm from Monday 17 to Friday 21 April in Spazi Espositivi Room at Ca’ Foscari University of Venice, Dorsoduro 3246 – 30123 Venice.
For morning coffee breaks from Monday 17 to Friday 21 April, vouchers will be available to enjoy a typical Italian coffee at Caffè Rosso if you attend the sessions at Santa Margherita Auditorium or at Venice Eat if you attend the sessions at Ca’ Foscari or Ca' Dolfin.
Five years after GDPR came into effect, thousands of new Data Protection Officers have been nominated, however, their level of proficiency is extremely variable. Moreover, some countries, like Germany have had DPO for many decades where others, especially recent EU members only introduce the role a few years ago. The need to recruit, train and educate DPO is therefore very high as well as very different across European countries.
The buffet lunch will take place at the Court of Ca’ Foscari University next to the Welcome and Registration Desk.
We will wait for you at the Caffè Margaret DuChamp located at D. Duro 3019 on Campo Santa Margherita as of 6.00pm.
terça-feira 18 abril, 2023
To combat global criminal and national security threats, governments across the world seek and collect electronic evidence and signals intelligence. However, with the globalization of digital information and communications networks, maintaining trust in how governments access data that flows across borders has become increasingly important to ensure continued effective and lawful government access to data to ensure public safety. For ...
We will have inaugurate the second edition of the Privacy Symposium on Tuesday 18th of April and enjoy the Official Welcome Reception at Scuola Grande di San Rocco at 6:00 pm.This Reception will take place In this magnificent building, dating back to the 15th century with of numerous artworks by the famous Venetian painter TintorettoFor your co...
quarta-feira 19 abril, 2023
The role of the Data Protection Officer has greatly evolved since the nomination of the first DPO in the Land of Hesse, Germany in 1971. Originally designed to protect citizens privacy against too much scrutiny from the state, it shall now protect people from the invasive curiosity of private companies, large and small, as well as from increasingly active criminal organizations. New EU regulations aim at controlling large internet actors with the Digital Services Act and the Data Marketing...
For morning coffee breaks from Monday 17 to Friday 21 April, vouchers will be available to enjoy a typical Italian coffee at Caffè Rosso if you attend the sessions at Santa Margherita Auditorium or at Venice Eat if you attend the sessions at Ca’ Foscari or Ca' Dolfin.
The buffet lunch will take place at the Court and the Spazi Espositivi at Ca’ Foscari University next to the Welcome and Registration Desk.
quinta-feira 20 abril, 2023
For morning coffee breaks from Monday 17 to Friday 21 April, vouchers will be available to enjoy a typical Italian coffee at Caffè Rosso if you attend the sessions at Santa Margherita Auditorium or at Venice Eat if you attend the sessions at Ca’ Foscari or Ca' Dolfin.
The buffet lunch will take place at the Court and the Spazi Espositivi at Ca’ Foscari University next to the Welcome and Registration Desk.
sexta-feira 21 abril, 2023
For morning coffee breaks from Monday 17 to Friday 21 April, vouchers will be available to enjoy a typical Italian coffee at Caffè Rosso if you attend the sessions at Santa Margherita Auditorium or at Venice Eat if you attend the sessions at Ca’ Foscari or Ca' Dolfin.
The buffet lunch will take place at the Court and the Spazi Espositivi at Ca’ Foscari University next to the Welcome and Registration Desk.
segunda-feira 10 junho, 2024
Introduction In this session, the panel explores the opportunities and challenges of fostering cooperation among DPO federations across Europe and beyond. By connecting expertise, resources, and networks, these federations play a crucial role in promoting best practices, facilitating knowledge, and advocating for strong data protection frameworks on a global scale.
Introduction Digital transformation is heading towards growing data integrations in the form of large-scale data spaces. In line with the European data space strategy, this session will discuss the implications in terms of privacy and data protection, as well as present insights from European research projects, such as AD4GD and IDEA4RC. The panel will provide guidance on how to best ...
terça-feira 11 junho, 2024
Introduction In pursuit of scientific research advancement, effective data sharing practices are essential. This session discusses the innovative solutions for facilitating data sharing in scientific research across local, national, and international contexts, by exploring best practices and emerging technologies. Through this panel discussion, attendees will gain practical strategies...
Introduction With the increasing digitization of healthcare information, finding a balance between data accessibility and individual privacy rights is crucial. Academics and experts on this panel will explore approaches to sharing health data while prioritizing privacy and security. In addition to this, attendees will discover cutting-edge strategies and frameworks designed to facilit...
Introduction While national regulations are impacting data processing activities and data flows, international research seems to be more and more needed. This session will focus on the needs and opportunities to develop international cooperation to support research in privacy and data protection. It also aims to identify practical actions to move forward and set the basis of an intern...
Introduction Data protection is essential. This session will explore inspiring use cases of data processing for good. The transformative power of data could drive positive social impact and advance humanitarian causes. From using data analytics for disaster response to studying insights for sustainable development goals, the speakers on this panel will explore inspiring and innovative...
Introduction This session is dedicated to exploring tangible strategies and frameworks for fostering international cooperation in research in the field of data protection. From joint research programmes and calls, to mutualizing research infrastructures and expertise, the participants will discuss potential actions that could enhance collaboration across borders to drive forward meani...
Introduction The regulatory landscape, ethical considerations and best practices are outlined by EU-CHECK to ensure responsible and trustworthy AI applications. In this session, attendees will gain valuable insight into the European Union’s Coordinated Universal Compliance for Keeping User Privacy and Security perspective, especially in the context of AI deployment. The speakers will ...
quarta-feira 12 junho, 2024
Introduction The EU GDPR makes over 70 references to certification, and its Article 42 sets the basis for a European Data Protection Seal. In October 2022, the European Data Protection Board approved the Europrivacy criteria to serve as European Data Protection Seal. In March this year, European Accreditation validated the accreditation of Europrivacy at European level in line with Ar...
Introduction Biometric data is increasingly used for medical diagnosis, public safety, and home access controls. In the ever-evolving world of data protection and privacy, biometric data compliance and ethics stand at the forefront of the discussion. From fingerprint scans to facial recognition, it represents a unique set of opportunities and risks. This session explores the ethi...
Introduction In this dynamic session, the speakers will explore virtual environments that are increasingly intertwined with our physical world, with a specific focus on metaverse, extended reality, and data spaces. They will also examine the latest trends, advancements, and regulatory challenges that face metaverse technologies, XR applications, and data space frameworks. In addition,...
quinta-feira 13 junho, 2024
Introduction This session will present views on the risks and opportunities associated with artificial intelligence, by giving the floor to senior experts and authorities from the European Data Protection Supervisor (EDPS), European Parliament, Commission nationale de l'informatique et des libe...
Introduction This deep dive-in session will present, step by step, the data protection certification journey in practice, with senior experts explaining the procedure to certify data processing activities with the European Data Protection Seal (Europrivacy) under Art. 42 GDPR. They will illustrate the detailed process of moving from compliance to certification, as well as the benefits...
The panel will delve into the intersection of data protection and sustainable AI development. Panelists will examine critical topics such as the legal implications of publicly available data usage, the role of synthetic data in shaping AI's future, strategies for sustainable Generative AI, and broader considerations of fairness, privacy, and policy in AI innovation. The panel will also serve as the platform for the launch of th...
Introduction This session will discuss the impact of artificial intelligence on safety and security. What are the new threats to be addressed? In parallel, it will also discuss how to make AI safe and secure by design. Speakers in this session will explore the latest advancements, challenges, and strategies to address security and safety.
sexta-feira 14 junho, 2024
Join professionals and experts from esteemed institutions united in the commitment to upholding the highest standards of data integrity and privacy in the medical field. This Track sets the stage for enlightening discussions, insightful presentations, and collaborative exchanges aimed at fostering compliance excellence in healthcare data management.
Introduction This session will focus on the adoption of the European Health Data Space (EHDS) regulation and its implications in terms of obligations and compliance. It will share the views of the European Commission and experts in this field. The speakers will also discuss the practical implementation of EHDS, in addition to the challenges and opportunities it presents.
Introduction This session will focus on the secondary use of data in the health and medical sector, with a special focus on the needs and challenges of practitioners, including in the medical research domain. From healthcare to research and beyond, the speakers on this panel will offer an insight into the evolving needs, barriers, considerations, frameworks, and challenges associated ...
Introduction This session will present and discuss innovative technologies and methodologies aimed at overcoming the barriers associated with secondary data use. Speakers will focus on solutions and innovative approaches for data reuse, including synthetic data generation, federated machine learning, and self-assessment methodologies. They will also unveil how these approaches are sha...
Introduction In the field of healthcare data processing, consent has long been considered the primary legal basis. However, with evolving medical research and innovation, alternative legal bases are gaining more attention. This session will discuss and review these alternative approaches to support lawful medical data processing.
Introduction Medical research often requires accessing large data sets from various geographic regions to avoid any bias in the results. This session will discuss the needs, opportunities, and challenges for sharing medical data beyond borders. The EHDS provides a mechanism for such international cooperation. How will it work in practice? What are the constraints in other jurisdiction...
As we draw the curtains on this enlightening conference with over 140 sessions and 300 experts from around the world, attendees will have the opportunity to carry forward lessons, connections, inspirations, and the spirit of collaboration necessary to shape the future of data protection, compliance, international cooperation, AI technologies, and fundamental human rights.
segunda-feira 12 maio, 2025
The AI and Compliance track serves as a dynamic platform for dialogue, knowledge exchange, and collaboration on the evolving legal and regulatory landscape of AI, in addition to its increasing involvement in all aspects of our personal and professional lives. This opening session welcomes the Rector of Ca' Foscari University of Venice and the Chair of the Privacy Symposium to set the stage for insightful discussions.
Discussions surrounding the interplay of AI and Data Protection Laws will reveal how academics and practitioners from around the world manage the intersectionality of these laws. How do data protection laws and emerging AI intersect, and how do they complement each other? If you’re a privacy professional, legal expert, AI developer, or policymaker, this is your must-attend session, as it will feature professionals from Google, EDRI, DG Justice, a...
Generative AI development and deployment is exploding, but the recent EDPB Opinion 28/2024 and early enforcement actions (notably the fine against OpenAI by the Garante in Italy) signal that compliance with the GDPR must be taken seriously from the outset. Against this backdrop, our panel will explore how to build trust and avoid pitfalls when developing and deploying LLMs in Europe. We’ll examine the evolving legal landscape—and whether it leaves enough room for meaningful innovation....
This enriching session will shed light on the consequences of data scraping in regard to privacy and intellectual property rights. Data scraping refers to the automated extraction of data from websites, APIs, and other online sources, which consequently raises questions surrounding the secondary uses of such data. Attendees of this session will have the opportunity to hear from several European and global authorities on how they perceive and addr...
As AI usage seems to proliferate, international regulations may be the way to go to develop cross-border compliance and cooperation. Featuring representatives from both sides of the Atlantic, as well as renowned global think tanks, this session will discuss how organizations can effectively align themselves with international regulations to achieve convergence and interoperability. ...
This remarkable session brings together leading experts from Google, Microsoft, the German Data Protection Authority, the European AI Agency, and the Italian State Secretary to discuss how organizations and governments can navigate AI risks while ensuring compliance. From balancing innovation with regulation to addressing ethical concerns, this discussion will provide critical insights into the future of AI governance.
This session brings together industry leaders and regulators to explore the essential aspects of designing compliant AI training models. In the discussion, panelists will provide a comprehensive overview of the intersection between regulatory requirements and innovative AI practices, offering practical advice and actionable insights for professionals in the field. Key topics include:
Agentic AI is ushering in a new era of technological capability, with systems designed to autonomously achieve complex goals by reasoning, planning, and using digital tools. This innovation holds transformative potential. Our panel will explore the evolving data protection considerations that accompany these advancements. Join leading experts as they discuss how familiar privacy principles apply in this new context and identify emerging questions, fostering a di...
AI systems are becoming more integrated into critical decision-making processes, which makes questions of liability and accountability more pressing than ever. If an AI-based decision goes wrong, who is responsible? This session will unite experts from Meta, Italian Institute for Privacy and Data Valorisation, AI Law Tech Institute, SGS, and CNPD to explore the evolving frameworks for AI liability and the role of certification in building respons...
We will inaugurate the fourth edition of the Privacy Symposium at the Official Welcome Reception. This event marks the beginning of a week rich in insightful discussions and open exchange, set in the inspiring atmosphere of Venice. Guests will have the opportunity to admire the remarkable works of Tintoretto, one of the city’s most celebrated painters, while connecting with professionals from diverse backgrounds and engaging in fruitful discussions. The evening will be enriched by...
terça-feira 13 maio, 2025
In this thought-provoking session, the panel will dive into the intriguing world of neuro privacy. As breakthroughs in neuroscience offer unprecedented insights into the human brain, important ethical questions arise regarding the collection, use, and potential misuse of neural data. The speakers will explore the intersection between neuroscience, privacy, and fundamental human rights, while focusing on the emerging challenges and potential solut...
Modern vehicles are more than just simple transportation; they are data hubs constantly collecting and transmitting information. From GPS tracking and in-car entertainment systems to AI-powered assistance, connected cars are revolutionizing the concept of mobility. The exceptional panel of this session will explore the fine line between convenience and surveillance, geolocation tracking, and how regulations are adapting.
While regulators worldwide are fighting the same battles, too often they’re doing it in isolation. This session brings together industry experts and distinguished officials from EDPS, Dutch Data Protection Authority, Office of the Privacy Commissioner of Canada, and US Department of Justice. Attendees will learn about the real challenges of cross-border privacy enforcement and explore the ways in which regulators can work together to turn fragmen...
The role of data regulations in enabling economic growth is currently a topic of intense interest in many parts of the world. Attendees of this enriching session will hear discussions on the nature and design of data regulations, and balances to be struck, including the extent to which regulators seek to enable good outcomes as well as prevent bad ones. Key questions
From GDPR to emerging AI regulations, organizations must navigate complex frameworks while ensuring seamless data flows across borders. This session will bring together experts to discuss practical strategies for overcoming regulatory conflicts, enabling responsible data practices, and fostering global cooperation. Key questions
Convention 108+, the ‘modernised’ version of the Council of Europe’s data protection treaty, is positioned to play a key role in shaping global data governance and privacy regulations for years to come. This treaty aims to create a more solid framework for data protection to keep pace with the digital world, and to extend beyond Europe’s borders. The esteemed speakers of this panel will present Convention 108+ in the context of striking a balance...
quarta-feira 14 maio, 2025
This session promises to dive deep into the real-world impact of data anonymization and synthetic data, exploring how these techniques are being used to protect privacy in different industries. Experts of the panel will break down the myths and realities of these privacy-enhancing technologies, tackling their benefits, limitations, and regulatory challenges head-on. Key questions&nbsp...
Europe’s data regulations are very intricate to form the whole picture, which means that each piece is essential, yet constantly shifting. The Data Act, Data Governance Act and GDPR are not isolated frameworks; they are deeply intertwined to shape the way we interact with the digital reality. This session unites esteemed professionals and officials from Euroconsumers, DG Justice, DG Connect, and Lativia DPA, diving beyond the legal aspect to unco...
With countries adopting their own unique approaches to data protection and compliance, organizations are left to navigate a maze of regulatory frameworks. The distinguished panel of this session is composed of high-level professionals and officials, from Timelex, EDPS, Digital Regulation Cooperation Forum, the Indian Ministry and many more. Together, they will explore how to address global data regulations while ensuring privacy and compliance. T...
Explore the critical issues shaping HR data privacy in the age of AI. This panel of government and legal experts will address the complexities of cross-border data flows, emerging compliance requirements, and the implications of AI for human resources data. Discover strategies for fostering international cooperation and ensuring robust employee data protection in a rapidly evolving regulatory landscape.
quinta-feira 15 maio, 2025
Medical data is one of the most sensitive types of information, yet it is also the foundation of groundbreaking research, diagnostics, and personalized treatments. Consequently, healthcare providers, researchers, and tech companies must navigate an increasingly complex web of regulations without slowing progress. Join the panel of this unique session as it unpacks the evolving landscape of medical data regulatory compliance and data governance.&n...
This session will welcome industry professionals to explore the adoption of the European Health Data Space (EHDS) regulation and its impact on obligations and compliance requirements. Drawing on the panel's insights, the discussion will cover the practical aspects of implementing EHDS, while also addressing the challenges and opportunities it presents. Key questions
In pursuit of medical breakthroughs, data is considered a goldmine. At the same time, accessing medical data should not come at the expense of crossing legal and ethical lines. This session will tackle one of the most important issues in medical research today: the lawful use of patient data for secondary purposes like advancing scientific discovery and healthcare innovation. The distinguished panel of this session will explore the complex questi...
Medical research often relies on accessing large and diverse datasets from different regions to ensure the results are comprehensive and unbiased. This session will explore the opportunities, needs, and challenges involved in sharing medical data across borders. The European Health Data Space (EHDS) offers a framework to enable such international collaboration, but how does it function in practice? What are the potential constraints in other juri...
This session will cover the legal implications and real-world use cases of anonymization, pseudonymization, and synthetic data. From enabling secure data sharing for research and ensuring compliance in clinical trials, the panel will dive into how some techniques can help meet privacy requirements while still fostering scientific progress. Key questions
Digital health is reshaping the way patient care is approached. This offers exciting new opportunities for personalized medicine, real-time health monitoring, and remote care, which makes healthcare more accessible and efficient. With all these advancements, however, comes great challenges. This session will explore the incredible potential of digital health, its impact on patient care, and the obstacles and opportunities it presents. ...
As we near the conclusion of the Privacy Symposium, take a moment to unwind at the Privacy Professionals’ Meet-up. After a day filled with insightful sessions and valuable connections, this is the perfect occasion to engage with fellow privacy experts and speakers, revisit inspiring conversations, and enjoy a relaxing evening over a refreshing spritz.
sexta-feira 16 maio, 2025
Get ready for an engaging session that will unite professionals from distinguished establishments to discuss the key skills that DPOs need to thrive in an ever-changing environment, in addition to some strategies for building their capacity to tackle new challenges. From legal expertise to tech-savvy adaptability, the speakers will dive into how DPOs can continue to evolve and make a real impact in their organizations and communities.