Agenda

Official welcome cocktail hosted by Mr Zdravko Vukić, Director of the Croatian Personal Data Protection Agency

Panel Session 3 | Latest developments and challenges around data transfers

Chair: Mr Bruno Gencarelli, Deputy to the Director – Fundamental Rights and Rule of Law Head of Unit – International Data Flows and Protection, European Commission

Speakers:
Mr Bertrand du Marais, Commissioner, CNIL,
Ms Isabelle Vereecken, Head of the Secretariat of the European Data Protection Board,
Ms Petra Lennhede, International Legal Advisor in the EU and International department, Swedish DPA,
Ms Nena Dragičević, Coordinator and Senior Inspector at the International Transfers team, Dutch DPA,
Ms Emma Bate, Director of Legal services, ICO,
Ms Caroline Gloor Scheidegger, Head of the Department for International Relations, Cantons at the Swiss Federal Data Protection and Information Commissioner (FDPIC),
Mr Alexander Filip, Head of Department, Bavarian DPA for the Private Sector

The panel will provide a deep dive into the latest developments and challenges around data transfers – model contractual clauses, interplay between the application of Article 3 and Chapter V of the GDPR, codes of conduct as tools for transfers, as well as current and future plans of the Commission in the area of data flows. The significant focus will be given to some practical issues that DPAs encounter in their daily practice. Authorities will share feedback they receive from the stakeholders and explore opportunities and ways forward, particularly in the European context with many shared values.

Lunch | Restaurant Cavtat, hotel Croatia

Panel Session 4 | Enforcement cooperation: cross-border cases and Article 50 of the GDPR, mutual assistance between EU and non-EU countries

Chair: Mr Wojciech Wiewiorowski, European Data Protection Supervisor (EDPS)

Speakers:
Mr Hielke Hijmans, President of the Litigation Chamber and Member Executive Board, Belgian DPA,
Ms Lela Janashvili, Head of Personal Data Protection Service, Georgian DPA,
Ms Catherine Lennman, Swiss Federal Data Protection and Information Commissioner (FDPIC),
Ms Emilie Brunet, Legal and policy officer, CNIL,
Mr Gwendal Le Grand, Head of activity for enforcement support and coordination at the European Data Protection Board,
Mr Ahmet Sönmez, Expert in the Department of Data Management, Turkish DPA

Authorities will get to discuss problems they encounter, best practices and strategies from real-world examples of sharing information (e.g. big tech) and enforcement cooperation cases, from across the spectrum of models of cooperation (e.g. a multilateral joint action, coordinated but separate investigations, a joint investigation). The purpose is to identify what approach can be adopted for which case as well as lessons learnt in each example given. The panel will also discuss the role the GCBECA and other formalised agreements could play (under article 50 GDPR, Convention 108+ or other laws).

Coffee Break 2

Session 5 | Report of the Subgroup Future of the Spring Conference

Speakers:
Ms Blandine Cassou-Mounat, Principal Policy Adviser, Information Commissioner’s Office (ICO),
Ms Catherine Lennman, Swiss Federal Data Protection and Information Commissioner (FDPIC),
Mr Bradley Tosso, Director of Information Rights and Operations, Gibraltar DPA

In 2020 the Working Group on the Future of the Conference was set up, following on from previous work within the Conference (Limassol Resolution; subsequent discussions at Conferences). The Working Group would like to report on its progress: the Future of the Conference survey 2020 and the analysis developed on this basis. This session will also look at various proposals put to the membership and the next steps.

Session 6 | Report on European Case Handling Workshop: member participation, workshop structure, topics covered and outcomes

Speaker: Mr Bradley Tosso, Director of Information Rights and Operations, Gibraltar DPA

Dinner| Restaurant Spinaker, hotel Croatia

Panel Session 1 | Foresight, innovation and technology monitoring, hosted by EDPS

Chair: Mr Wojciech Wiewiorowski, European Data Protection Supervisor (EDPS)

Speakers:
Mr Massimo Attoresi, Acting Head of Unit Technology & Privacy, EDPS,
Mr David Reichel, Project Manager – Social Research, Research & Data Unit, European Union Agency for Fundamental Rights (FRA),
Ms Paula Hothersall, Director of International, ICO,
Ms Kari Laumann, Head of Section for Research, Analysis and Policy & Project Manager for the Regulatory Sandbox, Datatilsynet,
Mr Andrés Calvo Medina, Chief Area on Technology within the Division of Technology and Innovation, Spanish DPA,
Mr Bertrand du Marais, Commissioner, CNIL

Technology is driving changes to the societal, business, political and legal environment that DPAs needs to regulate. In order to better address emerging privacy challenges resulting from the increasing use of new information and communication technologies e.g. AI and 5G/6G, the globalisation of processing operations and the ever greater flows of personal data, DPAs need to be at the forefront in the understanding them and being able to anticipate the future. The panel will showcase existing technology monitoring and foresight efforts and discuss how that expertise can be shared and used to the benefit of all members of the Conference of European Data Protection Authorities.

Refreshments

Panel session 2 | Raising awareness activities and implementation of the EU funded projects in EU and non - EU countries

Chair: Ms Anamarija Mladinić, Head of Department for Legal Affairs, International Cooperation and Projects, Croatian DPA

Speakers:
Ms MB Donnelly, Assistant Commissioner, Irish DPA,
Mr Luigi Montuori, Head of Service for EU and International Matters, Italian DPA,
Mr David Stevens, Chairman, Belgian DPA,
Ms Slobodanka Slavkovska, Head of the Unit for Supervision in private sector, DPA of North Macedonia,
Mr Eldor Budo, Head of the Sector of International Relations & Projects at the Information, Albanian DPA,
Mr Guido Scorza, Member of the Board, Italian DPA

The purpose of the panel discussion is to highlight the importance of awareness-raising activities and the opportunities offered by the European Commission in order to enhance the national data protection systems and improve the level of personal data protection of European citizens. The panelists will share their experiences in the implementation of various EU projects, e.g. ARC project for SMEs in Ireland and Croatia, Twinning projects in North Macedonia and Albania. The GDPR made awareness-raising duties of supervisory authorities explicit, therefore DPAs all over the EU developed communication strategies and innovative approaches to reach out to stakeholders: data controllers and processors from public and private sectors, DPOs, SMEs, NGOs, children and general public.