KEYNOTE ADDRESS:

Paul Arnold

Deputy Chief Executive & Chief Operating Officer, Information Commissioner's Office

Conference Chair

Bridget Treacy

The Conference is chaired by internationally-renowned privacy expert, Bridget Treacy

How the Explosion in Generative AI Impacts GDPR Compliance

Mark Watts - Partner, Bristows

What is ‘generative AI’ and how is it developed? What are the main GDPR issues when training and/or deploying large-language models (LLMs)? How can privacy rights be respected when such massive datasets are processed? This talk focusses on the compliance challenges when developing or using generative AI.

Developing a Global Privacy Compliance Programme. Where to start? Where to stop?    

Kate Brimsted - Partner, Bryan Cave Leighton Paisner

For any organisation with more than a purely national footprint, developing a joined-up approach to data privacy compliance is essential to success. But joined-up doesn’t necessarily mean homogenous. What should international organisations keep in mind when faced with varying, sometimes competing data protection laws? How might their data privacy compliance programme best function as a living operational “backbone”, rather than a GDPR-style accountability “checklist”?

How The AI Regulatory Revolution Affects You

Eduardo Ustaran - Partner, Hogan Lovells

The emergence of AI specific regulation is unstoppable and data protection practitioners have a crucial role to play. This session looks at what that new regulation requires, how every organisation can prepare for it, and what contribution a DPO can make to overcome this challenge.

Thinking Like a Hacker: The Key to Data Security

Richard Hollis - Director, Risk Crew

How is it that each year despite increasing our investment in cyber security, data breaches continue to soar? We allocate extensive resources and implement, policies, procedures and controls to secure our data, yet they seem to have very little effect. Why? Because we fail to think like our adversaries. While we may adopt their tools and methodologies to assess our systems, we fail to consider their personality traits and mindsets. This session looks at what drives hackers and how we can better defend our systems by simulating these characteristics.

The Evolution of Data Protection Negotiations

Emma Erskine Fox - Managing Associate, TLT Solicitors

Now that the GDPR is well-established in UK law, controllers and processors alike are very used to the need to include mandatory data processing provisions in their contracts, and well-versed in negotiating them. But the landscape is ever-evolving, and constant developments in law and guidance, as well as emerging technologies like AI, are changing the way in which parties are approaching data processing agreements. This session looks at how the evolution of the data protection landscape is affecting negotiations, and offers practical tips for how controllers and processors can navigate contractual discussions in a continually changing environment.

Subject Access Requests – The Changing Landscape

John Fitzsimons - Barrister, Cornerstone Barristers

2023 has seen several significant developments in subject access requests, including changes in how to deal with vexatious requests (as proposed in the Data Protection and Digital Information Bill), revised Guidance from both the ICO and the European Data Protection Board, two CJEU cases on the meaning of Articles 15(1)(c) GDPR and 15(3) respectively, and the High Court’s continued practice of taking a purposive approach to SARs despite there being nothing in the UK GDPR requiring such an approach. This session discusses these developments, and others, in a practical context and considers whether the handling of subject access requests in the UK is beginning to diverge from the EU. 

Data Protection Practitioner Panel

A Panel of Data Protection Practitioners share with delegates some insights into challenges that they have been facing and solutions that they have found.