CPDP 2023
2023-05-24..2023-05-26
Brussels, Belgium
CPDP ·
[CPDP 2013, CPDP 2015, CPDP 2016, CPDP 2019, CPDP 2020, CPDP 2021, CPDP 2022, CPDP 2023, CPDP 2024, CPDP 2026]
who it's for
data protection regulators, privacy and compliance lawyers, data protection officers and compliance officers, policymakers and legislative advisors, academics and researchers in privacy, product and platform privacy engineers, civil society privacy advocates
topics
access to police databases; age verification and age-appropriate design; cross-border data transfers and interoperability; Europrivacy certification scheme; vulnerability-informed DPIAs; regulatory approaches to dark patterns; governance and oversight of AI systems; end of online behavioural advertising; collection and sharing of gender data; published DPIAs and transparency tools; platforms and minors' privacy protections; consumer protection in Africa's digital economy
| title | author | length |
|---|---|---|
| ACADEMIC SESSION 1 | Amir Cahane, Shrutika Gandhi, Audrey Dequesnes | 01h 12m |
Three short case studies show concrete outcomes and legal gaps: ISA metadata repurposed for contact tracing reveals triangulation geolocation, early unlawful… | ||
| ”VULNERABILITY AND DATA PROTECTION LAW” BOOK LAUNCH | Paul De Hert, Wojciech Rafał Wiewiórowski, Julie Cohen, Natali Helberger, Gianclaudio Malgieri | 01h 11m |
Book argues GDPR must treat vulnerability as layered vulnerability — contextual, intersectional and driven by power imbalances — and gives a method: map… | ||
| THE RIGHT OF ACCESS TO POLICE DATABASES | Catherine Forget, Joanna Parkin, Daniel Drewer, Stergios Konstantinou | 01h 15m |
Directive 2016/680 requires direct access to police-held personal data but a pending ECJ case C-333/22 tests whether Belgium’s systematic indirect… | ||
| ACCOMMODATING CHILDREN’S NEEDS ONLINE: AN IMPOSSIBLE TASK? | Sophie Stalla-Bourdillon, Martin Bieri, Eva Lievens, Eric Goldman, Tony Allen | 01h 06m |
EU regulators push age checks (DPC ordered suspension pending compliance), the UK codifies an Age‑Appropriate Design Code (statutory since 2020) and… | ||
| INCREASED GOVERNMENT ACCESS TO PERSONAL DATA RETHINKING THE ROLES OF CITIZENS AND THE PRIVATE SECTOR | Wen-Ting Yang, Ming-Syuan Ho, Mélanie Dulong de Rosnay | 01h 16m |
Taiwan documents concrete expansions of state access: a mandated academic portfolio central database that forces default upload and delays deletion for five… | ||
| ACADEMIC SESSION 2 | Colin J Bennett, Julia Krämer, Klaudia Majcher, Jan Czarnocki, Karlo Lukic, Bernd Skiera, Klaus Miller | 01h 08m |
App store privacy labels are reshaping GDPR compliance but introduce inconsistent categories and web scraper evidence shows uneven adoption: of ~1.6M apps… | ||
| HOW TO PREPARE FOR A EUROPRIVACY AUDIT AND THE ACTUAL CERTIFICATE | Geert Somers, Pieter Gryffroy, Giovanni Francescutti, Sebastien Ziegler | 01h 13m |
Europrivacy is an EU-wide certification scheme approved by the EDPB that certifies specific data processing activities (not entire companies) against… | ||
| NOVEL CONCEPTS IN DIGITAL STATES AND THEIR STRUCTURES | Alessandro Mantelero, Indra Spiecker genannt Döhmann, Dara Hallinan, Vagelis Papakonstantinou | 01h 16m |
Panel argues states face concrete shifts: platforms effectively create private rule-sets and digital ecosystems that sidestep borders, while states respond by… | ||
| ACHIEVING SOCIAL JUSTICE FOR DATA WORKERS: IS THERE A ROLE FOR HARMONISED STANDARDS? | Antonio Casilli, Laurens Hernalsteen, Iverna McGowan, Aída Ponce Del Castillo, Jill Toh | 01h 11m |
Panel documents that training data and annotation rely on global manual labor — estimated 165 million data workers — often paid one to two cents per task or… | ||
| THE ROLE OF TRANSPARENCY, USER CONTROL, AND THE BALANCE BETWEEN FUNDAMENTAL RIGHTS | Maximilian Von Grafenstein, Cecilia Alvarez, David Pfau, Giovanni De Gregorio, Vera Jungkind | 01h 15m |
Panelists parse GDPR fairness as a guiding but undefined norm and show how concrete choices matter: examples include ad preferences and why I'm seeing this… | ||
| EU-US DATA PRIVACY FRAMEWORK:HOW DOES THE US EO SUSTAIN A NEW DURABLE AGREEMENT? | Juan Antonio Hernández Corchete, Vincenzo Zeno-Zencovich, Maria da Graça Canto, Georgios Yannopoulos, Isabelle Roccia | 01h 13m |
Panel examines whether the US Executive Order and accompanying regulations actually deliver an effective redress mechanism under Article 47 and whether… | ||
| DARK PATTERNS: DEFINITIONS AND EVIDENCE FOR REGULATORS | Nataliia Bielova, Colin M. Gray, Laura Litvine, Bertrand Pailhès, Dries Cuijpers | 01h 21m |
Panel argues EU and US laws now name dark patterns (DSA, CPRA) and uses concrete enforcement examples: a ticket site hid an insurance opt‑out between Denmark… | ||
| ACCOUNTABILITY TOOLS:FROM TRANSFERS TO CROSS-BORDER INTEROPERABILITY | Marie Charlotte Roques Bonnet, Nicola Coogan, Bojana Bellamy, Fabrice Naftalski, Morgane Donse | 01h 19m |
Panel reports concrete practice: BCRs as global compliance program (24-year history) versus CBPR/certification models, regulators eye accreditation and mutual… | ||
| BEYOND ETHICS WASHING:IMPACT ASSESSMENTS, AUDITS, AND OVERSIGHT FOR AI | Mirko Tobias Schäfer, Paul F. Nemitz, Iris Muis, David Graus, Maria Koomen | 01h 16m |
Panelists report concrete tools and pilots: a Freya fundamental‑rights impact assessment used two years in Dutch government, employer experiments with an… | ||
| HAVE YOU TRIED ASKING? ENGAGING WITH CITIZENS IN POLICY AND PRODUCT DEVELOPMENT | Clara Clark Nevola, Marie Potel-Saville, Emma Cantera, Anja Dinhopl | 01h 15m |
Regulators and companies use concrete methods — snowball‑fight word tests, closed cloze readability checks, co‑creation workshops and longitudinal family… | ||
| GDPR & LGPD: EXPLORING THE POTENTIAL OF CODES OF CONDUCT ACROSS BORDERS | Frank Ingenrieth, Natasha Torres Gil Nunes, Nathaly Rey, Ricardo Campos, Corinna Schulze | 01h 12m |
Brazil’s LGPD takes effect in 2018 with enforcement and authority set up in 2020, leaving companies working ahead of regulators while the authority builds… | ||
| SEE YOU IN COURT! | Romain Robert, Augusta Maciuleviciute, Jurjen Lemstra, Stefaan Voet, Petra Leupold | 01h 14m |
EU representative‑action rules set by the new Directive enable collective claims for GDPR, DMA and DSA breaches but member states lag on implementation and… | ||
| WILL THE DIGITAL SERVICES ACT PROMOTE SAFER AND HEALTHIER ALGORITHMIC RANKINGS? | Maximillian Gahntz, Jesse McCrosky, Xabier Lareo, Francesco Ricci, Anna-Katharina Meßmer | 01h 16m |
The DSA forces platforms to publish what parameters their recommenders use (Article 27: parameter transparency) and, for very large sites, to offer a… | ||
| THE COLLECTION, SHARING, AND USE OF GENDER DATA | Nasser Eledrooos, Kevin Guyan, Os Keyes, Ari Ezra Waldman | 01h 14m |
Shows how law and bureaucracy make gender data messier and dangerous: UK overruled Scottish self-ID on 17 Jan 2023 and a census that adds LGBT questions still… | ||
| THE GOVERNANCE OF AI: CONVERGENCE OR DIVERGENCE? | Merve Hickok, Emilio De Capitani, Daniel Leufer, Eleni Kosta, Tjade Stroband | 01h 08m |
Panel lays out concrete stakes: EU AI Act negotiations contain ~700 amendments, a four-item list of prohibited practices (Article 5) (subliminal techniques… | ||
| THE END OF ONLINE BEHAVIOURAL ADVERTISING | Mireille Hildebrandt, Paul F. Nemitz, Sandra Wachter, Marco Blocher, Wojciech Rafał Wiewiórowski | 01h 40m |
Panel argues online behavioural advertising is legally and economically precarious: NOYB complaints plus GDPR and EDPB orders challenge Meta’s switch to… | ||
| ACADEMIC SESSION 3 | Emmanouil Bougiakiotis, Merel Noorman, Tsjalling Swierstra, Ero Balsa, Helen Nissenbaum | 01h 18m |
Argues that individual consent often fails because of data externalities (e.g. Myspace-style reidentification), proposes control without consent by banning… | ||
| THE CHANGING FACE OF CONSUMER PROTECTION IN AFRICA’S DIGITAL ECONOMY | Linda Bonyo, Vellah Kedogo Kigwiru, Jorge Clarke, Ken Agengo | 01h 13m |
E‑commerce in Africa claims a $150 billion potential by 2025 and Jumia 23M monthly users and Takealot 10.5M visits anchor regional markets, but only 25 of 54… | ||
| SUBJECTS AND STRUCTURES:RE-IMAGINING DATA PROTECTION AS A CRITIQUE OF POWER | Aisha Kadiri, Victoria Guijarro Santos, Chloé Berthélémy, Felix Bieker | 01h 15m |
Argues that GDPR’s focus on individual control lets firms and states concentrate informational power, shows enforcement gaps (many member states report no… | ||
| WHOSE DIGITAL FUTURE? ENGAGING CITIZENS IN AI DEVELOPMENT AND IMPACT ASSESSMENT | Berna Keskindemir, Mirko Tobias Schäfer, Alyna Smith, Laura Galindo, Jana Gajdosova | 01h 08m |
A practical rundown: a multi‑stakeholder framework for meaningful engagement in AI human rights impact assessments is co‑created with 130+ experts and aims to… | ||
| A SAFE SPACE TO CREATE - HOW PLATFORMS ARE APPROACHING MINORS’ PRIVACY | Caroline Goulding, Simone Vibert, Darragh McCashin, James Brunger, Natascha Gerlach | 01h 11m |
Platforms describe concrete steps and trade-offs: regulatory stacks (GDPR, UK Age‑Appropriate Design Code, COPPA, emerging California AEDC, DSA) drive… | ||
| nothing matches | ||