Programme

Die Rechtsprechung des EuGH, Artikel 26 der Datenschutz-Grundverordnung und die entsprechenden behördlichen Leitlinien sollen dabei unterstützen, den Umfang der gemeinsamen Verantwortlichkeit und die Anforderungen an die Einhaltung der Vorschriften festzulegen. Der EuGH hat die gemeinsame Verantwortlichkeit in verschiedenen Kontexten betrachtet und das Konzept ausgeweitet. In jüngster Zeit sind einige Aufsichtsbehörden noch einen Schritt weiter gegangen und haben den Anwendungsbereich der gemeinsamen Verantwortlichkeit nochmals weiter ausgedehnt. Eine solche Ausweitung hat weitreichende Auswirkungen und verursacht Unsicherheiten bei zahlreichen Verantwortlichen, wenn es um die Einhaltung der Pflichten im Rahmen der gemeinsamen Verantwortlichkeit geht. 

Hintergründe, Kontext und Lösungsvorschläge werden im Panel diskutiert.

The presentation will describe recent PET developments that will provide the broader developer community (researchers, governments, nonprofits, businesses and more) new ways to deploy and enhance privacy features in their own work. 

PETs ensure Google can provide great experiences like helping you find a restaurant’s most popular dishes or getting better recommendations as you type a message, all while keeping our users’ information anonymous and protected. But adoption of these technologies for the broader industry has been historically challenging due to many barriers to entry, including requiring large computational resources, being complex to manage and expensive to implement. 

That’s why three years ago we set out to help create a safer ecosystem for every internet user by democratizing access to these privacy technologies for all, and have made many of our PETs freely available via open source projects in the years since.

Headlines about generative Artificial Intelligence vary from hailing it as the solution to many of today's most pressing problems on the one side, and the ultimate threat to human civilization on the other side. Privacy professionals are especially concerned about the dangers generative AI poses to personal data. Many are asking whether there is any way to capture the efficiencies and benefits of AI without sacrificing the protections we've fought so hard to establish for personal data. The good news? There are privacy-enhancing technologies that enable privacy-first use of generative AI solutions.

As we look across the modern IT stack, there are a huge range of Persona Types that require differing levels of access to your data – and in some cases, they have access merely as a bi-product of their role. Identity Security - which looks at protecting all Identity and Persona types in today’s environment - has become essential in not only protecting data from malicious actors but also to ensure regulatory compliance via the principle of least privilege. In this session we dive into how Identity Security protects access from your most privileged IT users through to External 3rd parties and non-human processes.

The fairness, transparency and lawfulness of online advertising business models has been heavily scrutinised recently by regulators and decisions and judgements have addressed essential questions in this context. Building on these the panel shall enable a discussion on how fairness in privacy and data protection should be placed in the right context, and be balanced against other interests and fundamental rights—such as the freedom of expression, the freedom to conduct a business, and the right to integrity. Why is it important to keep other rights in mind when interpreting GDPR, for instance, those concerning business models and international data transfers? And what role do other areas of law, namely contract law, play? This panel will address how fairness in advertising is related to the right implementation of the privacy-by-design principle. The speakers will also explore the role of user-centric tools for transparency and controls that are designed for people, businesses, and society to have a fair advertising experience. 

Based on recent case law and DPA decisions, what role do the concepts of fairness, transparency and lawfulness play when choosing an appropriate/adequate legal basis for running a data driven business model? 

What role should (1) balancing of interests and (2) user choices and controls play in the context of these principles and in choosing the appropriate legal basis (for personalized online advertising in digital offers without payment BUT also for other business models in other sectors)? 

What are noteworthy approaches and constructs with respect to fairness, transparency, user choices and control options for the individual user/customers in the context of different business models (eg. Ads-Free-Subscription models, Subscriptions)? 

What differs if these digital services or content are free of charge for the individual user/customer (i.e. financed by advertisers) and what does it take to obtain freely given consent for the processing of data required to finance services or content which are available to users free of charge? How do we think these regulations and their interpretations will impact online businesses and consumers in the future? Businesses need to monetise and are there concerns about the individual disproportionately feeling the impact of these regulations via walled gardens and payment for every service/platform they use online?

The German Whistleblower Protection Act came into force at the beginning of July. German companies must now take action. 

In the session of our partner DataGuard, you will get an overview of the essential requirements from a data protection perspective when setting up a whistleblowing system and case management. How to conduct a DPIA and what TOMs are necessary will be some of the covered tropics. In addition, you will learn practical tips on the conflict between "confidentiality vs. transparency obligations". Relevant case law and the position of data protection authorities, including fines imposed to date in the area of whistleblowing, will also be discussed.

What does it take to develop and operate age-appropriate digital services? Which regulations in the EU and in the Member States need to be observed? What are the key building blocks and what is the role of data protection and related transparency in particular? What are the key considerations for age-appropriate transparency and what approaches can be taken to ensure the effectiveness of the measures taken? How do these manifest themselves, for example, when writing a privacy policy or educating children about privacy? 

What you will learn: 

• The role of data protection in the context of age appropriateness. 
• An overview of the most relevant regulations 
• Relevant considerations for age-appropriate transparency 
• Practical examples of creating age-appropriate transparency for children and young people

In an increasingly interconnected world, the landscape of security legislation has evolved significantly to address emerging threats and safeguard societies. This presentation delves into the current state of security legislation around the world, exploring key trends, challenges, and their far-reaching implications. This overview highlights the intricate balance between protecting individual rights and ensuring collective safety in a rapidly changing geopolitical environment.