AGENDA

Data protection practitioners in the UK have had a rocky couple of years. From Dominic Cumming's 2018 comments on "binning" the "idiotic" GDPR, to the TIGRR Report, the DCMS consultation and the now possibly-binned Data Protection and Digital Information Bill.

Uncertainty is the only certainty in UK data protection landscape. As such, this panel will consider the current possibilities and help you prepare for the future of GDPR and PECR in the UK.

Host

• Alistair Cole, Partner & Director of Services, Privacy Culture

Speakers

• Simon Pillinger, Head of Governance, Ethics and PPI, Akrivia Health
• Katie Hewson, Partner, Stephenson Harwood LLP
• Fay Godfree, Data Privacy Officer, Siemens Healthineers
• Eleonor Duhs, Partner, Head of Data Privacy, Bates Wells LLP

As a sector, digital marketing has long been beset by compliance issues and has been subject to a great deal of high-profile enforcement action.

As Google finalises its plans to phase out third-party cookies, the company claims its new approach to ad-targeting will be more privacy friendly. But is this true? And what about considerations beyond privacy—most notably Google's market dominance?

This session will explore the future of online marketing and consider the implications for various stakeholders in the sector.

Speakers

• Samuel Famolu, Privacy Analyst, BCD Travel
• Bally Lotay, Senior Solutions Engineer, OneTrust

The GDPR changed the data protection sector immeasurably. But other upcoming EU laws could be equally significant in other ways.

This session will help ensure you are aware of what's coming next in the European regulatory landscape.

Host

• Yanya Viskovich, Chair of Cyber Law & Governance, Swiss Cyber Institute

Speakers

• Francesco Capparelli, Senior Fellow Researcher, Italian Institute for Privacy
• Beatriz Ruiz-Beato, Head of Global Data Privacy, NEC Corporation
• Linda Briceno, Head of Data Privacy and Ethics (UK and Europe), Santander UK

Schrems II affected many companies' ability to transfer data from the EU to the US. Meta has repeatedly stated that an order to stop transfers could force the company to stop offering Facebook and Instagram services in Europe.

Could this be true, or is it a bluff? Could Meta change relocate its infrastructure to keep EU users' data in Europe—and if so, would this actually solve the problem?

This panel will explore this controversial topic through the lens of data transfer rules.

Host

• Robert Bateman, Head of Content, GRC World Forums

Speakers

• Remco Bakker, Data Protection Officer, Brocacef Groep
• Danielle Stevenson, Group Data Protection Officer, The Access Group

We all know IT - the laptops, phones, applications, and cloud applications we use at work and home, that manage information. Systems that run industrial systems – electric utilities, gas pipelines, water systems, and manufacturing plants – are Operational Technology (OT).

OT cyber protection has many differences from IT – different systems, threats, requirements for managing vulnerabilities, and especially implications of a significant incident. Cyber incidents often require close coordination of IT and OT security domains.

During this session, we’ll explore some of the unique characteristics of OT environments, critical controls for OT cyber security, and key integration points between IT and OT security that streamline investigations and incident resolution.

Speakers

• Jan Hoff, Principal Industrial Incident Responder; Dragos, Inc.
• Kai Thomsen, Director, Global INcident Response Services; Dragos, Inc.
• Trish McGill, SME Cyber Security IT/OT, Self

The role of Chief Privacy Officer (CPO) has existed since the early 90s, but CPOs have become increasingly commonplace as companies use more personal data in increasingly innovative—and sometimes risky—ways.

CPOs are tasked with coordinating technical and legal teams in a fast-paced regulatory landscape, and are responsible for what can sometimes be a company's most valuable asset—data.

This session will bring together CPOs from leading companies to discuss their day-to-day and explore how the role is evolving.

Speakers

• Tom John Fischer Jensen, Chief Privacy Officer, Semler Gruppen A/S
• Christina Montgomery, Chief Privacy Officer, IBM
• Peter Pernot-Day, Global Chief Privacy Officer and Deputy General Counsel at SHEIN

Every year, high-profile security incidents make headlines—and 2022 has been no exception.

From Uber to Optus, this year's biggest data breaches have had major impacts on the companies and individuals they affect. But analysis of these incidents can teach privacy and security professionals a lot about how to keep systems and data safe.

This session will examine some of 2022's most significant security incidents, and consider how we can learn from them.

Host

• Jody Westby, CEO, Global Cyber Risk LLC

Speakers

• Susanne Bitter, Digital Security GRC Analyst - Business Partner Security, BP

US privacy law was once relatively simple for most companies not handling sensitive data. With a patchwork of comprehensive privacy state laws, an increasingly busy federal regulator, and an ever-more privacy-conscious general public, this is no longer the case.

This session will bring together experts in US privacy law to assess the current landscape—to help ensure you understand your responsibilities, wherever your company is based.

Host

• Julia Mehlman, Assistant Vice President & Associate Counsel, Data Privacy, L'Oreal

Speakers

• Joe O'Murchadha, Lead Senior Legal Counsel - Data Protection and Privacy (North America), SAP
• Jodi Daniels, CEO, Red Clover Advisors