CPDP 2015
2015-01-21..2015-01-23
Brussels, Belgium
CPDP ·
[CPDP 2013, CPDP 2015, CPDP 2016, CPDP 2019, CPDP 2020, CPDP 2021, CPDP 2022, CPDP 2023, CPDP 2024, CPDP 2026]
| title | author | length |
|---|---|---|
| Judicial activism in the field of data protection law. | Bruno de Witte, Orla Lynksey, Maja Brkan, Johannes Eichenhofer, Gloria González Fuster, Marko Ilešic, Giovanni Sartor | 01h 23m |
Courts claim new rights and invent criteria rather than wait for legislators: the Spanish Constitutional Court (2000) reads a right to personal data protection… | ||
| Understanding the data protection and privacy issues surrounding human trafficking. | Courtney Bowman, Julia Muraszkiewicz, Felicity Gerry, Baerbel Heide Uhl, Jennifer Kimball, Ryszard Piotrowicz | 01h 15m |
Conference panel presents concrete numbers and systems: global estimates of 20.9 million victims and a $150 billion market, a US hotline handling 135,000… | ||
| Privacy in computer science education. | Frank Kargl, Jaap-Henk Hoepman, Claudia Diaz, Claudia Roda, Raj Samani, Carmela Troncoso | 01h 15m |
Panel argues that computer science curricula treat privacy as marginal (the ACM/IEEE CS 2013 baseline gives about 9 hours ≈ 3% of core hours), pushes PREPARE’s… | ||
| Academic sessions (4) | Ronald Leenes, Napoleon Xanthoulis, José M. del Álamo, Yod Samuel Martín García, Marijn Hoijtink, Matthias Leese, Eric Lachaud, Rowena Rodrigues, David Barnard-Willis, Paul De Hert, Vagelis Papakonstantinou | 01h 42m |
Five linked papers test concrete fixes: one maps how right to be forgotten removals often leave content in the Deep Web and offers three practical enforcement… | ||
| Implications of the CJEU judgement of 8 april 2014 on data retention. | Jens-Henrik Jeppesen, Sylvain Métille, Fulco Blokhuis, Franziska Boehm, Fanny Hidvegi, Hielke Hijmans, Rejo Zenger | 01h 22m |
CJEU declares the Data Retention Directive void on 8 April 2014 and defines a strict proportionality and safeguards test: blanket, undifferentiated retention… | ||
| Governing credit scoring. Data protection, algorithms & surveillance. | Rocco Bellanova, Kristie Ball, Julia Horwitz, Agniezka Marzec, Keith Spiller, Hågen Thomas Ljøgodt | 01h 13m |
Panel reports concrete specifics: Norway requires a standard license for credit‑scoring firms that limits which sources and variables they may use and forces… | ||
| Assessing the societal impact of automated border control gates. | Ann-Charlotte Nygård, Sadhbh McCarthy, Gemma Galdon Clavell, Peter Graham, Mark Maguire, Anne-Marie Oostveen, Irma van der Ploeg | 01h 16m |
Panel reports concrete field work: interviews with 155 airport passengers, observations and focus groups show 31% adoption of 65 eGates at 15 UK sites and 75%… | ||
| Revenge pornography. Legal and policy issues. | Abhilash Nair, Lawrence Siry, Christina Gagnier, Laura Higgins, Holly Jacobs, Nishant Shah | 01h 13m |
Panel summarizes concrete interventions and failures: a UK hotline logs 23 new cases since last year and struggles with anonymous image boards, Bitcoin… | ||
| Feminist perspectives on privacy and data protection. | Gloria González Fuster, Anne Roth, Nighat Dad, Nicole Dewandre, Heather Morgan, Valerie Steeves | 01h 13m |
A 1500-profile scan and interviews with girls aged 15–22 find a narrow, magazine-style femininity enforced online, with girls asking for audience segmentation… | ||
| Academic sessions (3) | Laurent Beslay, Vanessa Díaz, Sophie Stalla-Bourdillon, Tilman Frosch, Sven Schäge, Martin Goll, Thorsten Holz, Anthony Morton | 53m |
Argues legal categories break down in practice and proposes a taxonomy that treats payload vs headers as the decisive technical boundary, warning that packet… | ||
| Neighborhood watch: Towards security self management ... | Chiara Fonio, Reinhard Kreissl, Joachim Kersten, James Maddan, Alexander Neumann | 01h 10m |
Panel reports that the UK model has 173,000 schemes covering about 3.8 million households and claims 16–26% drops in residential burglary in watch areas… | ||
| Smart phones and law enforcement. | Mario Oetheimer, Tobias Bräutigam, Diana Alonso Blas, Els De Busser, Daniel Drewer, Michael Olmsted | 01h 17m |
Smartphone data supplies call logs, timestamps, GPS and photos that often provide the decisive time‑and‑place links investigators use; forensic teams routinely… | ||
| Who best watches the watchers? | Diane Whitehouse, Jay Stanley, Emma Carr, Bryan Cunningham, Nils Leopold, Nico van Eijk | 01h 16m |
Compares concrete oversight failures and fixes across four systems: US Congress keeps power of the purse and a Speech or Debate shield that could have exposed… | ||
| Citizens' attitudes to privacy, surveillance and security (1) | Rocco Bellanova, Jacob Skjødt Nielsen, Jim Dratwa, Sara Degli Esposti, Michael Friedewald, Sarah St Vincent | 01h 17m |
Two FP7 projects run large mixed methods studies: SurPRISE conducts one-day citizen summits in nine countries with about 200 citizens per summit discussing… | ||
| Citizens' attitudes to privacy, surveillance and security (2) | Johann Cas, Marc van Lieshout, David Barnard-Wills, Lilian Mitrou, Jacob Skjødt Nielsen, Daniel Trottier | 01h 16m |
Projects claim the simple “privacy for security” trade-off is false and produce concrete tools: large participatory events with 200-person citizen summits and… | ||
| Do-it yourself privacy protection. Empowerment or burden? | Michael Friedewald, Shara Monteleone, Seda Gürses, Paul C. Johannes, Tobias Matzner, Kostas Rossoglou | 01h 08m |
Do-it-yourself privacy tools exist for ~20 years but remain rarely used; the panel argues that PGP, Tor, Tails and browser plugins help end-to-end encryption… | ||
| Online privacy versus freedom of speech. Balancing rights in the EU context. | Arno Lodder, Tijmen Wisman, Magdalena Jozwiak, Argyro Karanasiou, Marco Pancini, Bart van der Sloot | 01h 18m |
Panel reports Google pushes full-disk encryption across Android and publishes transparency reports while offering user controls like Takeout and a dashboard… | ||
| Drones at the margins. RPAs applications fork community and citizen-led applications. | Philip Boucher, Kristin Sandvik, Kathleen Bartzen Culver, Austin Choi-Fitzpatrick, Apostolos Malatras, Serge Wich | 01h 14m |
Panel investigates civilian and community drone uses, showing concrete cases and tech limits: journalism captures the Harlem gas explosion from a hobbyist and… | ||
| Complaints handling and litigation by DPAs. | Jan Dhont, Diana Alonso Blas, Willem Debeuckelaere, Mathias Moulin, Udo Oelen, María Verónica Pérez Asinari | 01h 13m |
European DPAs compare concrete practices: CNIL receives ~6,000 complaints and issues almost 20 sanctions after 90% resolved by letters or mediation, running 60… | ||
| DPO on the ground. Key Challenges of the EU reform for privacy professionals. | Cecilia Alvarez, Stewart Dresner, Jennifer Barrett-Glasgow, Delphine Harou, Gabriela Krader, Leticia López-Lapuente, Philippe Renaudière | 01h 16m |
EU institutions require a DPO under Regulation 45/2001 and the Commission counts about 900 processing operations across 30,000 staff; the EDPS inspects… | ||
| Private use in public and public use in private. ... | Miquel Peguera, Sari Depreeuw, Maurizio Borghi, Severine Dusollier, Stavroula Karapapa, Orla Lynskey | 01h 06m |
Argument: the internet collapses the public/private line in copyright so private copying is an exception not an escape, CJEU demands lawful sources, and… | ||
| Coorperation between data protection authorities. Threats, challenges and opportunities. | Laurent Beslay, Gwendal Le Grand, Emmanuelle Bartoli, Ignacio Sanchez, Max Schrems, David Wright | 01h 17m |
Project FEDRA maps concrete barriers: differing powers, confidentiality laws that block file‑sharing, scarce resources and language gaps; it issues 15… | ||
| Exploration of the adequacy of privacy protection law ... | Lillie Coney, Stephanie Perrin, Leonardo Cervera Navas, Laura de Boel, Claire Gayrel, Bruno Gencarelli | 01h 15m |
Panel reviews a survey of California law against EU adequacy criteria, finding concrete strengths (a constitutional privacy clause, breach‑notification model… | ||
| Concluding notes | Giovanni Buttarelli | 15m |
European Data Protection Supervisor sets a concrete agenda: one EU voice on data protection, a strategic plan due soon and active enforcement to make rules… | ||
| Reviewing intelligence services, data collection and EU/US relations. | Willem Debeuckelaere, Christopher Docksey, Tim Edgar, Chris Hopfensperger, Florence Raynal, Peter A. Swire, Douwe Korff | 01h 15m |
Panel reviews post‑Snowden reforms and remaining gaps: U.S. issues PPD‑28 promising PPD-28 changes to treat non‑US persons like US persons where possible… | ||
| Surveillance and intelligence agencies. After Snowden and after Charlie. | Gerrit Hornung, Joanna Cavan, Ahmed Ghappour, Eleni Kosta, Anne Roth | 01h 21m |
After Snowden and Paris the panel maps concrete legal fights and oversight gaps: the UK oversight office runs retrospective, full-system audits and issues 350… | ||
| How Privacy innovators are trying to seize the business opportunity of personal data ... | Giovanni Verheaghe, Ulrich Seldeslachts, Paula Bruening, Pierre Chastanet, Rob Leslie, Marcel van Galen, Toby Weir-Jones | 01h 32m |
Claims rapid productization: a secure Android private OS ships after five months of engineering, hits a backlog five times planned production and is in market… | ||
| Law enforcement internet jurisdiction. | Paul De Hert, Cristos Velasco, Julia Hörnle, Cornelia Kutterer, Dan Svantesson, Anna-Maria Osula | 01h 11m |
Law enforcement is finding that mutual legal assistance treaties are too slow—MLATs take six months—and UN figures show 70% use MLATs for transborder data… | ||
| 'We give up -please fix the interwebz'. ... | Joe McNamee, Ben Wagner, Anna Buchta, Gwendal Le Grand, Paul F. Nemitz, Katarzyna Szymielewicz, James Leaton-Grey | 01h 14m |
European courts require search engines to de-link name-based results (not erase original pages) and DPAs provide 13 criteria and demand transparency and stats… | ||
| The emergence of privacy companies. Privacy as a competitive advantage? | Philip Schütz, Marit Hansen, Nicolas Dubois, Ali Jelveh, Marc van Lieshout, Phil Zimmermann | 01h 12m |
Startups prove demand: encrypted messaging app Streamer doubles users and revenue within a week after WhatsApp acquisition, Protonet raises €1.5M in 10 hours… | ||
| EU data protection reform: Have we found the right balance ... | Paraskevi Michou, Ruth Boardman, Jan Philipp Albrecht, Michał Boni, Claude Moraes, Axel Voss | 01h 21m |
Three years into the reform the record is concrete: Parliament votes a first‑reading position in March 2014 after 4,000 amendments and about 750 MEPs weigh in… | ||
| Data protection authorities and data protection officers ... | Charles Raab, Ivan Szekely, Emma Butler, Waltraut Kotschy, Stephen McCartney, Peter Schaar | 01h 11m |
Panel maps how DPO roles and DPA relations actually work across countries: Austria has no legal DPOs but a market for them and an Austrian ministry special DPO… | ||
| Engineering privacy into the internet. | Achim Klabunde, Rob van Eijk, Marit Hansen, Jaap-Henk Hoepman, Simon Rice, Florian Stahl, Hannes Tschofenig | 01h 17m |
Panel describes concrete outputs and failures: post‑Snowden IPEN launches a network and holds a Berlin workshop that yields ten action lines; an RFC from the… | ||
| Location privacy: what problems - which solutions? | Claudia Diaz, Mireille Hildebrandt, Rosa Barcelo, Michael Herrmann, Linnet Taylor, Laura Tielemans | 01h 20m |
Panel argues location data creates new granular surveillance: 6.3 billion mobile phones emit continuous traces that can reveal religion, networks, movement… | ||
| Cybercrime social engineering analysis challenge. | Efrain Castaneda Mogollon, Sven Übelacker, Margaret Ford, Marianne Junger, Roeland van Zeijst | 01h 17m |
Organised by the TREsPASS Project
Chair: Efrain Castaneda Mogollon, Vrije Universiteit Brussel (BE)
Moderator: Sven Übelacker, TU Hamburg-Harburg… | ||
| Accountable organizations deserve benefits from regulators. | Marty Abrams, Colin J Bennett, Christopher Docksey, Terry McQuay, Michael Scuvée, Scott Taylor | 01h 21m |
Proposal tests whether regulators give benefits to organizations that voluntarily submit to onsite inspections by demonstrating an effective privacy management… | ||
| The right to be forgotten. European and international perspectives. | Ronald Leenes, Anna Fielder, Hiroshi Miyashita, Artemi Rallo Lombarte, Marc Rotenberg | 01h 16m |
The CJEU finds search engines as controllers and requires delisting when results are inadequate, irrelevant or excessive, not just inaccurate; Google logs… | ||
| Can automated processing make privacy notice/choice more effective ... | Ann-Katrin Habbig, Joel Reidenberg, Aaron Burstein, Alexander Dix, Clarisse Girot, Cameron Russell, Florian Schaub | 01h 13m |
Project builds annotation tools, uses crowdsourcing + machine learning and NLP to extract concrete data practices from privacy policies, trains classifiers on… | ||
| Opportunities and risks of big data in disease surveillance. | Tim Eckmanns, Leon Hempel, Ciro Cattuto, Jennifer Cole, Martin French, Edward Velasco | 01h 19m |
Panel argues big data can shorten detection by days but often fails to give earlier warning in practice; examples include global pandemic models built from… | ||
| A learning health care system secondary use of health data in research (2) | Lex Burdford, Sjaak Nouwt, Remco Coppen, Ernst Hafen, Dennis Horgan, Peter Knight, Tessa van der Valk | 01h 20m |
A Netherlands survey of 1500 surveyed, 731 responses finds high trust in clinicians (~90%) and researchers (~75%) and reports 60% accept no-consent scientific… | ||
| Between two commissions. The European Commission meets the Federal Trade Commission. | Omer Tene, Julie Brill, Paul F. Nemitz | 01h 13m |
Comparison of U.S. and EU privacy systems focuses on enforcement and concrete mechanisms: the FTC reports over 100 enforcement cases and 20-year consent orders… | ||
| Academic sessions 1. | Ronald Leenes, Felix Ritchie, Richard Welpton, Edward Felten, Joanna Huey, Arvind Narayanan, Lisa Lucile Owens, Christiana Markou | 01h 19m |
Four concrete claims and failures: access governance works better when researchers are treated as partners so systems favor shared responsibility and… | ||
| Academic sessions 2. | Laurent Beslay, Vlad Niculescu-Dinca, Jason Pridmore, Pauline De Keersmaecker, Corentin Deballieul, Liane Colonna, Daniel Guagnin, Niklas Creemers, Ignacio Cofone | 01h 07m |
Dutch police run ANPR as a sensor network that applies live behavioral profiles (e.g., repeated parking visits to catch canvas-cutters), keeps data only for… | ||
| A learning health care system secondary use of health data in research. (1) | Lex Burdford, Sjaak Nouwt, Joanna Forsberg, Christan Ohmann, Matti Rookus, Magnus Stenbeck, Evert-Ben van Veen | 01h 14m |
Panel presents concrete registry work and policy fixes: a register case–control of ~2,200 breast cancer patients links radiation records and shows 116%… | ||
| Private Life. A Fundamental Right! | David Morelli, Franck Dumortier, François Koeune, Laurie Phillips | 01h 21m |
The panel examines how recent security measures aimed at fighting terrorism and crime—especially online—threaten citizens’ privacy and create tensions between… | ||
| Privacy by analogy. Lessons from copyright law, environmental law ... | Kristina Irion, Serge Gutwirth, Egbert Dommering, Dennis Hirsch, Anna Fielder, Jyn Schultze-Melling | 01h 12m |
Panel argues EU privacy needs second‑generation regulation: set goals, let industry design means, not prescriptive tech rules. Proposes a centralized data… | ||
| Using ICT for environmental regulation. Overlaps between privacy and environmental law. | Raphaël Gellert, Rónán Kennedy, Guido Gorgoni, Martina Hennessy, Andrew Jackson, Burkhard Schafer | 01h 12m |
Environmental regulators report concrete deployments: a national EPA spends about 10% of its budget on ICT, runs an Environmental Data Exchange Network… | ||
| Privacy and competition in the digital economy. | Sophie in ‘t Veld, Giovanni Buttarelli, Morten Messerschmidt, Sophie Moonen, Kevin Voges | 01h 23m |
Discussion links privacy and competition with concrete examples: Google‑DoubleClick 2008 and the Facebook‑WhatsApp review, fines such as a €953m cartel penalty… | ||
| Dynamic data obscurity. | Daniel Pradelles, Marty Abrams, Erin Kenneally, Gary LaFever, Shaul Levi | 01h 09m |
Panel proposes Dynamic Data Obscurity: replace static IDs with changing pseudonyms (separate site identifiers linked by removable keys) so datasets remain… | ||
| Crypto wars reloaded? Privacy technologies, cybersecurity ... | Joanna Cavan, Seda Gürses, Luc Beirens, Gus Hosein, Bart Preneel, Phil Zimmermann | 01h 11m |
Panel argues governments push for key access while major services roll out end-to-end tools and large-scale surveillance expands. Examples: PGP and Tor revive… | ||
| Monitoring the net for violent extremist material. | Pete Fussey, Maura Conway, Ian BROWN, Sadhbh McCarthy, TJ McIntyre, Robindra Prabhu | 01h 02m |
Report compares concrete practices: industry uses MD5 hashing to auto‑flag child‑abuse images and notify NCMEC, governments push URL‑based blacklist and DNS… | ||
| LGBT+ Communities and digital rights. | Sophie Kwasny, Monika Zalnieriute, Lara Ballard, Valentina Pellizer, Renato Sabbadini, Ben Wagner | 01h 07m |
Panel documents concrete risks: an algorithmic playlist profiling paper shows sexual orientation can be inferred with over 90% accuracy, libraries’ mandatory… | ||
| I spy with my fly: When video surveillance goes mobile. | Fanny Coudert, Jos Dumortier, Mathias Bousset, Nathalie Grandjean, Daniel Le Métayer, Jay Stanley | 01h 09m |
Miniaturized wearable cameras spread quickly: about a quarter of US agencies experiment with them and a presidential $75M matching proposal accelerates uptake… | ||
| Users' control over their data: is prior consent the best way to monitor. | Julie Brill, Finn Lützow-Holm Myrstad, Marie Charlotte Roques Bonnet, Wojciech Rafał Wiewiórowski | 01h 16m |
Panel argues that one-off prior consent no longer gives real control: regulators cite FTC enforcement (including Google cases) and consumer complaints that… | ||
| Latin America, at the vanguard of data protection, in face of technological risks. | Ana Brian Nougrères, Pablo Palazzi, Paulina Silva | 01h 12m |
Latin America is pushing concrete legal changes: Uruguay gains EU adequacy (2012) and ratifies Council of Europe Convention 108, with new public‑sector rules… | ||
| Cross border data flow. Where do we stand? | Colin J Bennett, Danilo Doneda, Hosuk Lee-Makiyama, Thomas Zerdick | 01h 09m |
Panelists argue current tools—adequacy findings, binding corporate rules and APEC’s CBPR—are partial and often incompatible, leaving individuals with few… | ||
| Bentham goes to school: surveillance and student privacy in the classroom. | Michael D. Birnhack, Yucel Saygin, Emmeline Taylor, Omer Tene | 01h 12m |
Cloud platforms and analytics are already central to schools: a $100M-backed pilot called In Bloom shutdown ( ~$100M funding) collapses amid privacy backlash… | ||
| Combining privacy in the workplace with information security measures. | Frank Hendrickx, Walid Maalej, Nigel Moss, Stephanie Raets | 01h 12m |
A multidisciplinary panel reports the MUSES project building a usable endpoint security prototype and says companies pair yearly Safe Harbor certification with… | ||
| The EU-US interface: Is it possible? | Margot Kaminski, David Thaw, Pierluigi Perri, Joris van Hoboken, Eduardo Ustaran | 01h 14m |
Panel argues EU and US privacy clash is less about vague values and more about concrete rules: Safe Harbor critique notes a controller/processor mismatch and… | ||
| Commercial opportunities for designing privacy in: Embedding privacy ... | John Borking, Casey Chappelle, Tom Ilube, Jason Pridmore | 01h 16m |
Timeline maps concrete PET work: PISA agents, privacy ontologies and an open PETs repository; eight reusable strategies (minimize, hide, separate, aggregate… | ||
| To be or not to be (anonymous)? Anonymyity in the age of big and open data. | Josep Domingo-Ferrer, Mark Elliot, Antoinette Rouvroy, Vincent Toubiana | 01h 17m |
Panel contrasts the Article 29 30‑page opinion and practical toolkits: legal test of singling out and linkability plus an inference criterion; famous failures… | ||
| Introduction | Paul De Hert | 08m |
Conference frames privacy as interdisciplinary practice with 60 panels spanning law, tech, social science, NGOs and industry, no single theme so debates shift… | ||
| nothing matches | ||