GDPR. The DPO Day Program

Agenda

IT Governance Issues

How To Prepare For The Data Breach And The Ethics Breach

• Break down the difference between a data breach and an ethics breach.
• Define the key insights from recent data breaches and learn how to avoid these mishaps
• Gain an incident and breach toolkit to prepare the organisation ahead of a breach

Developing GDPR and Data Privacy, Data Protection Policies

• The structural basis of the GDPR Policies, procedures and Frameworks
• GDPR as a platform for improving IT Concepts
• Developing Privacy as a competitive advantage- leveraging the investment

Post-GDPR Effects

• Post-GDPR landscape in European jurisdictions
• Enforcement actions against EU companies under the GDPR;
• Guidance issued by local regulators touching on Data Protection Impact Assessment and Data Protection Officers

Guidance Issued By Local Regulators And Review Of The Latest GDPR Publications:

• Data Protection Impact Assessment and Data Protection Officers
• EDBP Guidelines on certification
• European Cybersecurity Act incl.
• European Cybersecurity Certification Framework

Establishing Data Privacy Culture & Risk Assurance

• Embedding privacy culture within the company & privacy by design measures;
• Conducting privacy impact assessments;
• Risk management at the corporate group level

GDPR Compliance Issues

Case Study; Overview Of GDPR Project At Company ABC

• The Key Compliance challenges
• The Corporate perspective vs Client point of view
• Important Implementation Lessons Learnt

GDPR 2.0 – Supporting The GRC and IT Security Momentum

• Best practices in data management and Security
• DPO 2.0 The journey continues...
• Disclosures and Notification obligations beyond GDPR

How to Harmonise Data Protection In A Diverse Context?

• Diverse context (multiple businesses, entities, territories, authorities/ DPAs, control approach, etc.)
• Networking and stakeholder’s coordination
• Approach on cross-context DP processes (DPIAs, data breach, DPA request, etc.)
• Generate trust through 3rd party assessment

Moving GDPR From Programme Implementation to Business as Usual

• Two-year GDPR programme transition is needed
• Embedding and integration of Risk Management processes is essential
• Continued focus and management attention for success is critical

GDPR Risk Management Issues

GDPR And Pseudonymization Solutions – Enabling Further Processing And Lowering Risks

• General legal and organisational requirements for pseudonymization examples
• Data protection focus group on pseudonymization
• How to eliminate the risk of Data Breach with Intelligent Pseudonymisation of Personal Data

GDPR; The Solutions and Processes for Lowering Risks

• The need for further processing for analytical and other big data processes
• The need for risk reduction
• Risk Assessments: The Touchpoints

Minimising Privacy Risk From A Global Data Processor’s Perspective

• DPO, Controller or Processor? – (and the risk of mixing roles)
• Minimising the aggregate privacy risk vs contract sharing
• Using a Data Processor modular DPIA and data flow
• Leveraging Binding Corporate Rules as Data Processor

GDPR Cyber-and IT Security Issues

Responding to Data Breaches – The Different (Lawyer, Corporate, Oversight) Perspectives

• Regulatory guidance and evolving practice under the GDPR
• The thresholds for notification requirements under the GDPR
• Legal considerations: Privilege, self-incrimination
• Contractual aspects and insurance

Privacy and Data Protection in The Age of Big Data & Algorithms

• Big data & privacy: main challenges
• Privacy and security by design as the way forward in the age of big data
• Big data and algorithms: challenges and opportunities

Ensuring Privacy and Concealing Biometric Data

• Concealing biometric PII with de-identification
• PII from facial recognition to avoid identity theft
• Privacy challenges in the age of facial recognition
• Lessons from the latest incidents involving facial recognition misuse
• Methods for dealing with AI-driven facial recognition

GDPR; How Can the Assessment of IT And Technical Measures Generate Trust

• High relevance due to the high amount of IoT devices
• Technical measures and State-of-the-Art required by the GDPR
• The need for further processing for analytical and other big data processes
• Data Scrambling Vs. Mapping techniques

Prof. Emmanuel Fragniere will privide the results of a 2019 qualitative survey

• The distinction between AI and digitalization.
• Every digitalization is not a software upgrade that must be accompanied by change management.
• What are the risks when digitization does not work
• How can the remaining employees ”take care of" the problems.