KEYNOTE ADDRESS: 

Regulating in a Changing World

Emily Keaney

Deputy Commissioner

ICO

Conference Chair

Bridget Treacy

The Conference is chaired by internationally-renowned privacy expert, Bridget Treacy

How to Use AI and Comply - Sensible Approaches to Managing the Innovative use of AI with Data Protection Compliance

Jenna Franklin - Partner, Stephenson Harwood

Organisations are finding ever more innovative uses for AI systems in order to leverage the potential efficiencies and market opportunities. This carries risk, particularly under data protection laws. It is crucial to manage these risks, and to make sure that your privacy framework is fit for purpose when doing so. This session focusses on practical strategies for managing data protection risks in innovative AI, including examining areas of key risk, leveraging the risk management strategies familiar to data protection professionals and adapting privacy frameworks to mitigate innovative AI risks.

Children's Data - How to Navigate the Increasingly Complex Minefield

James Brunger - Associate General Counsel, Snap Inc.

Processing personal data on children is one of the most challenging areas within the field of data protection. Even controllers that do not intend to process non-adult data often do so inadvertently and need to take the potential into account. In this talk, the co-lead for privacy and digital regulatory law at Snapchat walks delegates through the latest risks as regards children’s data, including issues such as age assurance, AI and holistic impact assessments, and provides practical tips that delegates can use in their organisations and in their personal lives.

Expert Panel - Making Sense of Emerging Data Protection Complexities

Damien Welfare - Former Public Law Barrister

Glen Hymers - Head of Data Privacy, UK Cabinet Office

Eleonor Duhs - Partner, Bates Wells

The new reality is that data protection intersects with an increasingly complex array of related regulation. Accordingly, DPOs and Compliance Professionals can no longer focus solely on the UK GDPR but need a working knowledge of related regulation, proposed changes, emerging government strategy, and of how these factors are likely to impact data protection governance within their organisation. Our special Panel of experts will explain how DPOs and Compliance Professionals can stay on top of the emerging regulatory changes, and how to identify in a practical way the issues that are key for their organisations. The discussion will include possible approaches to regulating AI within the UK, potential changes to the UK GDPR, and the practical impact of regulators working collaboratively within the UK Digital Regulation Cooperation Forum.

The Effect of the UK and US Elections on International Data Transfers

Eduardo Ustaran - Partner, Hogan Lovells

Data protection is not immune to the world’s geopolitical situation and international data transfers are at the centre of emerging data sovereignty policies and increasing government surveillance. With the prospect of substantial political changes in the US and the UK, this session considers the potential effect of those changes on global data flows and how to manage in practice the increased scrutiny on this issue.

Data Sharing - Challenges and Practical Solutions

Eleonor Duhs - Partner, Bates Wells

The ICO’s data sharing code of practice reminds us that not sharing data can be detrimental. Are barriers to data sharing imagined or real? What practical steps can we take to share data where it makes sense to do so, and in what contexts should we be cautious? This session looks at how to share data using a risk-based and pragmatic approach.

Direct Marketing - How to Ensure Compliance in this Fast-Changing Area

Jade Kowalski - Partner, DAC Beachcroft

The rate of change and level of enforcement in the field of e-privacy and direct marketing continues apace. We have also seen significant recent decisions and opinions issued on the legal basis for behavioural advertising, as well as the scope of e-privacy legislation. In parallel, changes are afoot in the technology that will be used in the near future. This session unpacks these and other developments to bring delegates up to speed on this fast-changing area of law and what steps organisations should consider to reduce the risk of enforcement action.

Shining a Light on Dark Patterns: Exploring a Growing Compliance Issue in Tech & Data Ethics

Karishma Brahmbhatt - Counsel, A&O Shearman

With fines for dark pattern practices reaching over USD 2 million, organisations can no longer afford to ignore the shift in global regulatory focus on this area. This session discusses a variety of dark patterns and their interplay with online choice architecture and frontier technologies such as artificial intelligence, before navigating the patchwork of UK and European regulation and exploring the practical steps that organisations can take to address dark patterns.

Practical Guidance on Using Biometric Technologies

Tim Hickman - Partner, White & Case

From authenticating device logins to controlling access to premises, biometric technology is an increasingly common reality of every-day life. Although the advantages of using biometric technologies are undeniable for many organisations, using them in a compliant manner is increasingly challenging. Courts and regulators are continuing to interpret the GDPR’s rules regarding the processing of biometric data, and the EU AI Act (with its aggressive approach to extraterritorial application) adds a further layer of complexity. This session explores the compliance risks associated with using biometric technologies, and provides delegates with practical tips for avoiding such risks.