Registration and welcome coffee

Opening remarks from Euroforum and the conference chair

Bojana Bellamy
President, Centre for Information Policy Leadership,
Hunton Andrews Kurth LLP

GDPR – the first year – most important findings and a new quality of cooperation

Dr Andrea Jelinek
Chairwoman, European Data Protection Board;
Director, Austrian Data Protection Authority (EDPS)

Q&A and Discussion

International Legal Environment AD 2019. Is GDPR really influential outside of EU?

Wojciech Wiewiórowski
Assistant Supervisor, EDPS

Q&A and Discussion

Looking back at the first year of GDPR

Prof. Dr Johannes Caspar
Data Protection Officer,
Federal State Hamburg, Germany

Q&A and Discussion

Google and the GDPR, Year 1

Peter Fleischer
Global Privacy Counsel
Google, Inc., France

Coffee break

Ensuring privacy and prosperity in the digital economy

James Sullivan
International Trade Administration,
U.S. Department of Commerce, USA

Q&A and Discussion

ePrivacy: Protecting confidentiality of communications in the 21st century – a view from the European Parliament

Birgit Sippel
Group of the Progressive Alliance of Socialists and
Democrats in the European Parliament, MEP

12.30 – 13.00

DISCUSSION

The ePrivacy Directive in the digital age

Birgit Sippel
Caroline Louveaux, Chief Privacy Officer, Mastercard, Belgium
Dr Anna Zeiter LL.M., Chief Privacy Officer, eBay, Switzerland

Lunch

14.00 – 14.40

DISCUSSION

Chances and challenges in international data protection

Peter Fleischer
Dr Andrea Jelinek
Florence Raynal, Deputy Director, Head of Department of European and International Affairs, CNIL, France
James Sullivan

One year on: The office of the DPO at Facebook

Stephen Deadman
Data Protection Officer, Facebook, UK

Responsible Artificial Intelligence

Julie Brill
Corporate Vice President and
Deputy General Counsel, Microsoft, USA

Update from the French Data Protection Authority

Florence Raynal
Deputy Director, Head of Department of
European and International Affairs, CNIL, France

Coffee break

The role of a Lead Supervisory Authority – an update from the Irish Data Protection Commission

Dale Sunderland
Deputy Commissioner,
Data Protection Commission Ireland

UK’s international strategy: Looking forward

Steve Wood
Deputy Commissioner, Executive Director Policy,
ICO, UK

Q&A and Discussion

EVENING ACTIVITY

On the evening of the first EDPD conference day, we cordially invite you to an exciting Trabi Safari. The Trabi (Trabant) was the most common vehicle in Eastern Germany (the former GDR). Experience Berlin’s famous sights and enjoy a traditional Berlin “Currywurst” after the tour!

Registration and welcome coffee

Opening remarks from Euroforum and the conference chair

Prof. Dr Ulrich Wuermeling LL.M.
Visiting Professor, Queen Mary University of London;
Latham & Watkins, Germany

KEYNOTE

Rebecca Kelly Slaughter
Commissioner,
Federal Trade Commission

Q&A and Discussion

9.40 – 10.10

DISCUSSION

Dealing with individual rights requests on GDPR

Idriss Kechida, Global Head of Privacy, Matchgroup, USA
Aku Odunton, Data Protection Associate, Facebook, Instagram, Oculus and WhatsApp, UK
Kalinda Raina, Head of Global Privacy, Senior Director, LinkedIn, USA

Data driven business models respecting fundamental rights – how?

• Ubiquitous data collection and use nowadays has real effects on people in the physical world
• Many modern services and business models fundamentally rely on big data and AI
• GDPR aims to help protect fundamental rights also beyond privacy: security of person, freedom of thought, expression, work etc.
• Can GDPR be used to reconcile these rights in a practical way?

How to deliver both: Innovation and data protection compliance

Anna Pouliou
Head of Privacy,
CHANEL, France

Coffee break

Building a culture of privacy: The opportunity ahead

• Trust
• Values driven
• Privacy is everyone’s Job

Is California joining the EU?
The California Consumer Privacy Act brings EU data protection principles to the U.S.

Jonathan Avila
Chief Privacy Officer,
Wal-Mart Stores, Inc., USA

Building true accountability for privacy

Mikko Niva
Group Privacy Officer and Head of Legal,
Vodafone, UK

Health data and data privacy

• Balancing interests under GDPR
• Removing obstacles created by conflicting legislation
• Defining controllership in complex business models

Navigating privacy in a data centric world

Jules Polonetsky
CEO, Future of Privacy Forum, USA

Lunch

PARALLEL SESSIONS
Choose your individual subject!

SESSION 1

MODERATOR:
Dr Axel von dem Bussche
Partner, Taylor Wessing, Germany

14.00 – 14.20

International dispute resolution under the GDPR

• Who is in control of the processing?
• Management of Third Country data Transfers
• Restrictions of data subject rights
• How to prepare?

Dr Friedrich Popp
Senior Associate,
Debevoise & Plimpton, Germany

14.20 – 14.40

GDPR beyond EU – on it’s way to a common global standard?

Dr Axel von dem Bussche
Partner, Taylor Wessing, Germany

14.40 – 15.00

Controller-processor relationships – challenges, experiences and possible solutions

Barbara Eggl
ECB & ESRB Data Protection Officer,
European Central Bank

15.00 – 15.20

365 days of GDPR: Report from a business perspective

• 5 Findings from the first year with the GDPR in force
• What would we do differently?
• What’s up next in data protection for businesses?

Guido Hansch
Global Privacy Officer & Head of Data Protection,
Birkenstock Group, Germany

SESSION 2

MODERATOR:
Prof. Dr Ulrich Wuermeling LL.M.

14.00 – 14.20

The California Consumer Privacy Act – how it compares to the GDPR and what European companies need to know

• Background and key concepts of the CCPA
• Applicability to European companies
• Enforcement
• CCPA vs. GDPR – Similarities and differences

D. Reed Freeman, Jr., Partner, Co-Chair Cybersecurity and Privacy Practice, WilmerHale, USA
Dr Martin Braun, Partner and Co-Chair, Big Data Practice, WilmerHale, Germany

14.20 – 14.40

Building and operating a successful
Privacy-By-Design Program

• The GDPR Article 25 requires Data Protection by Design and by Default, but how do companies fulfill this requirement in practice?
• How can a company make a privacy-by-design program scalable and sustainable and not slow the business down?

Katherine Tassi
Deputy General Counsel,
Snap Group Limited, USA

14.40 – 15.00

Why the GDPR is doing all the ground work to get AI+ML ready – insights on implementation

Jan Wittrodt
Head of Data & IT Law,
Zalando SE, Germany

15.00 – 15.20

GDPR and its extra-territorial effect from Chinese perspective

• The positive effect of GDPR on China’s data protection scene: the adoption of the rules under GDPR and the contribution to awareness raising in China
• The convergence and divergence between Chinese data protection rules and GDPR
• How much companies can rely on GDPR-centric privacy management program
• How to deal with unique aspects of Chinese data protection rules: multiple-level protection system, various national standards and sectoral rules, multiple regulators with different regulatory priorities

Gil Zhang
Fangda Partners, China

One year GDPR – lessons learnt and practical experience in key areas:

E-Privacy & marketing under the GDPR after no new e-privacy regulation was agreed (for the time being): how to cope in practice with legal uncertainties and different approaches in different countries

Individual rights, in particular data subject rights requests: scope of obligations and procedures which work for companies based on practical experience and examples – how to deal with unclear, excessive and massive approaches & balancing requests with other parties rights and company confidentiality

Contractual relations: Controller-Processor vs Joint controller vs independent controllers – dealing with the changes required by the GDPR and ways to deal with excessive requests in daily Business

Data breach: how to minimize the damage if the worst case happens? Use cases and practical experience from dealings with Regulators

Brexit: impact on applicable laws, contracts, SCCs, BCRs, supervisory

WORKSHOP TIME FRAME

8.30–9.00 Registration and welcome coffee
10.30–11.00 Coffee break
12.30–13.30 Lunch
14.30–15.00 Coffee break
16.00 End