Registration and welcome coffee
8.50 – 9.00Opening remarks from Euroforum and the conference chair
Bojana Bellamy
President, Centre for Information Policy Leadership
Hunton & Williams, UK
Vera Jourová
European Commissioner for Justice, Consumers and Gender Equality
European Commission
Q&A
Irish DPC final reflections – The new data protection era dawns
Helen Dixon
Data Protection Commissioner
Ireland
The new law enforcement infrastructure of the GDPR
Prof. Dr Johannes Caspar
Data Protection Officer
Federal State Hamburg, Germany
Innovation in compliance with GDPR
Peter Fleischer
Global Privacy Counsel
Google, Inc., France
DISCUSSION
GDPR, compliance and current developments in data protection – chances and challenges
Prof. Dr Johannes Caspar
Helen Dixon
Peter Fleischer
Zoe Strickland, Managing Director, Global Chief Privacy Officer, JPMorgan Chase & Co.
Coffee break
11.40 – 12.00 KEYNOTE Giovanni Buttarelli
European Data Protection Supervisor (EDPS)
A new regulatory chapter for (UK) data protection – what to expect from a regulator with an international outlook
Elizabeth Denham
Information Commissioner, UK
Florence Raynal
Deputy Director, Head of the Department of European and International Affairs
CNIL, France
Barbara Thiel
Data Protection Officer
Federal State Niedersachsen, Germany
GDPR, 25th May 2018: The end of the beginning
Stephen Deadman
Global Deputy Chief Privacy Officer
Facebook
Lunch
14.20 – 14.40Data Privacy developments: An American Perspective
Hugh Stevenson
Deputy Director, Office of International Affairs
U.S. Federal Trade Commission, USA
14.40 – 15.00
Privacy Shield: Protecting Privacy and Enabling Cross-Border Data Transfers in a Global Economy
James Sullivan
International Trade Administration
U.S. Department of Commerce, USA
DISCUSSION
Privacy challenges in international data transfers
Elizabeth Denham
Bruno Gencarelli, Head of Unit International Data Flows and Protection, European Commission
James Sullivan
Eu Gene Tan, Legal Counsel Ethics & Compliance, Data Privacy, Accenture, Singapore
Coffee break
16.10 – 16.30Update on the proposed ePrivacy Regulation
Fenneke Buskermolen
Unit Cybersecurity and Digital Privacy
European Commission
GDPR versus ePrivacy: Where is the right balance?
Stefano Fratta
Legal Director for Consumer, Fintech and Big Data
Telefónica CCDO, Spain
DISCUSSION
ePrivacy: 2018 and beyond
Fenneke Buskermolen, Unit Cybersecurity and Digital Privacy, European Commission
Stephen Deadman, Global Deputy Chief Privacy Officer, Facebook
Willem Debeuckelaere, President, Commission for the Protection of Privacy, Belgium
Stefano Fratta, Telefonica
David Martin, Senior Legal Officer, BEUC
EVENING ACTIVITY: GUIDED TOUR AT THE GERMAN SPY MUSEUM
The German Spy Museum Berlin gives a unique insight into the gloom of espionage right where the Wall once divided the city. Visitors are welcome to use the most recent multimedia-based technology to detect all the bizarre and sneaky methods of agents and secret services. Afterwards we cordially invite you to a typical Berlin dinner with “Currywurst”.
Registration and welcome coffee
9.10 – 9.20Opening remarks from Euroforum and the conference chair
Prof. Dr Ulrich Wuermeling LL.M.
Visiting Professor, Queen Mary University of London
Partner, Latham & Watkins, Germany
Data protection towards security, prevention and law enforcement: Cut the Gordian knot
Willem Debeuckelaere
President
Commission for the Protection of Privacy, Belgium
Q&A
The cybersecurity requirements of GDPR – a regulatory and practical analysis of the requirements
Ilias Chantzos LL.M.
Senior Director EMEA and APJ, Global CIP and Privacy
Advisor Government Affairs, Symantec Corporation,
Belgium
Artificial Intelligence and data protection
Julie Brill
Corporate Vice President and Deputy General Counsel
Microsoft, USA
Machine Learning with Personal Data under the GDPR
- What is automated individual decision-making and when is it permitted?
- Making sense of the requirement to provide ‚meaningful information about the logic involved‘
- Practical design implications for machine learning processes
Prof. Christopher Millard
Professor of Privacy and Information Law, Centre for Commercial Law Studies
Queen Mary University of London, UK
Q&A
Coffee break
11.30 – 11.50Subject Access Rights: DSGVO Implementation Guide
- DSGVO grants data subjects new rights including: data portability, access, erasure or “right to be forgotten”, and rectification.
- Data controllers have new specific record keeping requirements around the time to respond, the ability to request an extension, the requirement to validate the identity, and securely transmitting the response to the individual.
- Learn how with privacy management software can streamline and automate requests, validation, and notification processes.
Ian Evans
Managing Director
OneTrust EMEA
Data Breach Notification under the GDPR: Practical Lessons from the U.S. Experience
- Similarities and contrasts between EU and U.S. requirements
- Tailoring the right breach notification procedures for your organization
- Establishing the breach response team – before the breach occurs!
- Planning and practicing – how to conduct a realistic table top exercise
- Interacting with regulators, activists and the press
- Best practices for data subject notification
- Successfully communicating developments to senior leadership
Jonathan Avila
Chief Privacy Officer
Wal-Mart Stores, Inc., USA
Q&A
GDPR: Beyond the Talk, Let’s Get to Execution
- How to take a strategic view of the data management challenges in GDPR
- How to repurpose the data (and slash costs) to solve other governance issues such as eDiscovery, compliance, and records management
- Methodologies in evaluating and comparing different GDPR/governance solutions in the marketplace
Kon Leong
CEO
ZL Technologies, USA
Lunch
13.40 – 14.00Communicating data practices to children: How to achieve substantive protections through transparency
Katherine M. Tassi
Deputy General Counsel
Snap Group Limited, USA
The new DPO role from a practical perspective
Marc Placzek, Director Global Privacy, Data Protection Officer, PayPal (Europe) S.à r.l. et Cie, S.C.A., Luxembourg
Dr Anna Zeiter LL.M. (Stanford), Chief Privacy Officer, eBay Inc., Switzerland
Privacy trends in Asia Pacific
- News on CBPR
- Data localization trends by country
- China, India and beyond
Eu Gene Tan
Legal Counsel Ethics & Compliance, Data Privacy
Accenture, Singapore
Health data protections and the new risk landscape
- Recent changes in health data uses and what it means
- The role of consent in health data uses
- Key current controversies in health data uses
- Matching health data protections to the emerging risks: What does GDPR protect/leave out?
Pam Dixon
Executive Director
World Privacy Forum, USA
Coffee break
PARALLEL SESSIONS
Choose your individual subject!
MODERATOR:
Prof. Dr Ulrich Wuermeling LL.M.
GDPR: From Challenge to Transformation
- IBM’s global GDPR readiness journey and beyond
- Intelligent data governance and processing solutions
- Creating new business opportunities through trust and transparency
- Privacy by design in practice
Cristina Cabella
IBM Corporation
Chief Privacy Officer, Italy
Could the ISO privacy standards help Data Protection Officers to better sell GDPR compliance tasks to Engineers?
- Overview ISO privacy framework from a Data Protection Officer’s point of view
- ISO/IEC 29134 (Guidelines for privacy impact assessments) and Data Protection Impact Assessments under GDPR
- ISO 25237 (Health informatics – pseudonymization) and pseudonymization under GDPR
Uwe W. Fiedler
Chief Privacy Officer
Parexel International, Germany
Preparing for litigation under the GDPR – the companies’ perspective
- New litigation options for data subjects under the GDPR – who, when and where?
- Litigation against supervisory authorities, in particular against fines
- Relationships between controllers and processors and between joint controllers and their implications for litigation
- Litigation following data breaches
- Lessons learned from other areas of the law, and from other countries
Dr Martin Braun
Partner
WilmerHale, Germany
GDPR is here, what now for Processors and Controllers?
Ralph T O’Brien
FIP, CIPM, CIPP/E, CIPT, CiSMP
Principal Consultant, Europe
TrustArc
Final discussion, Q&A
MODERATOR:
Bojana Bellamy
IoT, apps, GDPR and now ePrivacy: What to do to get it right?
Simon Hania
Vice President Privacy & Security
TomTom, The Netherlands
Data Protection in a Payment Environment
- Introduction into Online Merchant’s Payments
- Touchpoints with personal data
- Applicable law and use cases
- Future Developments
Bernd Suchomski LL.M.
Legal Counsel Data & IT Law
Zalando SE, Germany
EU-U.S. and other Third Country data transfers
- Privacy Shield and the upcoming Commission adequacy findings
- Standard Data Protection Clauses under CJEU review
- Are BCRs (or other transfer instruments) a useful alternative?
Dr Friedrich Popp
Debevoise & Plimpton, Germany
The usage of free social network solutions in the company
- General company policies for the usage of “external” services
- The real life experience
- How to handle the situation from a company’s perspective
- The responsibilities of the company and the employees
- Employee information and guidelines
Dr Claus-Dieter Ulmer
Global Data Privacy Officer
Telekom AG, Germany
Final discussion, Q&A
Welcome GDPR reception with drinks provided by
GDPR Countdown Workshop
1. GDPR goes live: day to day duties
- Last minute compliance
- Training, Audits
- Documentation duties
- Data Management System installed
- Regular update data processing register/DPIA
2. Regulator’s Standpoint
- Summary of all available guidelines
- Gaps left open by regulator
- Regulator stricter than the law?
3. Defense Strategies
- Proceedings against regulator
- How to deal with activists?
- Cyber security threats
- Management of data subject requests
4. Digitalization with GDPR embedded
- Privacy by design
- Big data
- Monetize data
- Data management of digital projects
Dr Axel Freiherr von dem Bussche LL.M., Partner, Taylor Wessing Partnerschaftsgesellschaft mbB
Paul Voigt, Salary Partner, Taylor Wessing Partnerschaftsgesellschaft mbB
WORKSHOP TIME FRAME
8.30– 9.00
Registration and welcome coffee
10.30–11.00
Coffee break
12.30–13.30
Lunch
14.30–15.00
Coffee break
16.00
End