CPDP 2026
2026-05-19..2026-05-22
Brussels, Belgium
CPDP ·
[CPDP 2013, CPDP 2015, CPDP 2016, CPDP 2019, CPDP 2020, CPDP 2021, CPDP 2022, CPDP 2023, CPDP 2024, CPDP 2026]
who it's for
privacy regulators, corporate legal counsel, data protection officers, cybersecurity professionals, technology policy makers, platform compliance teams, civil society advocates, academic researchers
topics
child safety on mainstream platforms; generative AI conversation privacy; cloud compute concentration and sovereignty; EU Data Act implementation; e-evidence cross-border procedures; trade secret claims vs disclosure; biometric data and law enforcement; pseudonymity on public blockchains; homomorphic encryption and MPC deployments; consent practices under GDPR/DSA/DMA; secondary use in health data spaces; digital omnibus regulatory impacts
| title | author | length |
|---|---|---|
| Stranger Things Online: Navigating Child Safety in the Digital Age | Jan Ellermann, Jeroen Wauman, Anke Theresia Paulusz, Jessica Galissaire, Jaap-Henk Hoepman | 01h 15m |
Describes a specific online network called 764 COM that grooms 8–16 year olds, with perpetrators aged 12–20 and about 80% of victims girls, operating on… | ||
| AI Sovereignty from the Global Majority | Nicolo Zingales, Cecilia Rikaap, Divij Joshi, Melody Musoni, Sebastiano Toffaletti | 01h 24m |
Global Majority claims focus on concrete levers: cloud is the stack with AWS/Azure/Google holding ~65% of market power, African hosting at ~2% (≈250 data… | ||
| Digital Sovereignty in Wartime: Legal and Cybersecurity Considerations | Defne Halil, George Dimitrov, Guy Banim, Polina Petrova | 01h 05m |
European dependence on non‑EU cloud, AI and satellite services becomes tactical vulnerability: Ukraine shows cyberattacks hitting critical infrastructure… | ||
| My Chatbot, My Confidant?” Protecting User Privacy in Generative AI Conversations | Theodore Christakis, Declan McDowell-Naylor, Natascha Gerlach, Peter A. Swire, Yann Padova | 01h 18m |
Generative chat logs are used by default for training, with 230 million weekly health queries cited and examples where thumbs‑up feedback overrides opt‑outs… | ||
| Beyond the Encryption Debate | Orla Drummond, Karen Garland, Tamara Polajnar, Aagje Ieven, Desara Dushi | 01h 20m |
SALVUS maps the full investigatory pathway and pushes concrete fixes: harmonize cross‑border evidence rules, train forensic teams, and deploy trauma‑informed… | ||
| Unlocking the Data Economy: The EU Data Act in Practice | Joost Gerritsen, Laura Drechsler, Simon Hania, Berend van der Eijk, Georgia Bakatsia | 01h 15m |
Panel explains that the Data Act is live since September 2025 but immediately runs into operational problems: seven overlapping chapters create conflicting… | ||
| The Entry into Application of the e-Evidence Package | Stanislaw Tosza, Vanessa Franssen, Tania Schroeter, George Zlati, Riane Harper | 01h 17m |
Regulation starts applying 18 August 2026 but many Member States still lack transposition of the directive and central authorities, so the EU faces a staggered… | ||
| Rights of access to corporate documentations and the trade secrets defence | Vilma Margarit Nikolaeva, Danny Mekić, Ljubiša Metikoš, Lisa Steinfeld, Michaela Gehring | 01h 13m |
Panel dissects how GDPR access rights meet repeated trade‑secret claims: regulators can inspect withheld files and the Ombudsman wins disclosure (face‑mask… | ||
| The EU Law Enforcement Directive: Where It Stands Today | Franziska Boehm, Eleni Kosta, Juraj Seifert, Evangelos Zarkadoulas, Evanthia (Evi) Chatziliasi | 01h 16m |
Recent CJEU rulings and pending referrals change how states collect, store and reuse biometric and criminal‑justice data: Politeni Presidium (C‑57/23) allows… | ||
| Pseudonymity, Automation, and Responsibility on Public, Permissionless Blockchains under the GDPR | Veronika Hurina, Ondrej Kovarik, Vyara Savova, Amandine Jambert | 01h 24m |
Explains concrete legal and technical tradeoffs: EDPB Guidelines 02/2025 and the Commission’s Nov 2025 proposals push off‑chain storage plus on‑chain proofs… | ||
| When Data Can’t Move but Insight Must | Matjaž Jug, Dave Buckley, Robert Pisarczyk, Rosanne Turner, Yurii Sushko | 01h 19m |
When data must stay put, privacy-enhancing technologies actually move the insight: deployments use homomorphic encryption and secure multi-party computation to… | ||
| Exploring the lands of GDPR, DSA and DMA: Using the consent umbrella when it’s raining with data | Larisa Munteanu, Adrianus van Heusden, Paloma Krõõt Tupay, David Korteweg, Felix Mikolasch | 01h 15m |
Compares concrete GDPR, DSA and DMA clauses side‑by‑side, shows how GDPR consent standard breaks down in practice (pre‑ticked boxes and blanket consents still… | ||
| “Get out of my feed!”: Child-centered strategies to enhance well-being and agency on social media | Aurelia Tamò-Larrieux, Sandra Cortesi, Luka Bekavac, Ulrik Lyngs, Michael Veale | 01h 13m |
Platforms hide report and “show me less” buttons and kids (ages 12–14) often can’t find or use them; recommender opt-outs are binary and short‑lived, while… | ||
| Enforcing Digital Regulation in Times of Omnibus | Giovanni De Gregorio, Simona Demkova, Angelica Fernandez, Lubos Kuklis, Bianca-Ioana Marcu | 01h 16m |
Panel maps concrete frictions: a commission report flags 54 interacting instruments, the DSA team reports 17 open DSA investigations and one closed, and… | ||
| When Big Tech rules universities: reclaiming academic freedom through digital sovereignty | Maria-Luisa Stasi, Cecilia Rikap, Natali Helberger, Wladimir Mufty, Frank Karlitschek | 01h 14m |
Shows a working Nextcloud pilot across five Dutch universities and admits it took a two‑year procurement slog to get live, with one year of operation and… | ||
| Rhetoric over rights: the Digital Omnibus, competitiveness and the end of European values? | Felix Bieker, Maria Magierska, Itxaso Domínguez de Olazábal, Midas Nouwens | 01h 17m |
European Commission pushes a rushed Digital Omnibus that redefines personal data, adds an AI development lawful basis and claims €5 billion savings without a… | ||
| After the Omnibus: Consent or Red Lights? | Niko Härting, Christiane Wendehorst, Christopher Millard, Markus Wünschelbaum, Merel Van Aar | 01h 13m |
Panel argues consent is overused, fragmented across 27 jurisdictions and often impractical for clinical trials, employment and complex adtech/AI ecosystems, so… | ||
| From legal obligation to practice: making Fundamental Rights Impact Assessments work. | Berna Keskindemir, David Reichel, Karolina Iwańska, Harshvardhan J. Pandit | 01h 15m |
Mandatory FRIA duties under the EU AI Act are already concrete: Article 27 template is being drafted with an automated tool alongside a paper form, public… | ||
| Secondary use of data under the European Health Data Space: some relevant issues | Pablo Trigo Kramcsak, Francesca Tassinari, Federica Casarosa, Anastasiya Kiseleva, Owe Langfeldt | 01h 16m |
European Health Data Space sets hard dates and roles: it entered into force March 2025, applies in 2027 and makes secondary use operational 2029 only after… | ||
| Designing Collective Technology Governance | Asia Biega, Jane Suiter, Kristina Zenner, Nicholas Vincent, Six Silberman | 01h 21m |
Panel argues current individualist regimes fail and proposes concrete alternatives: data trusts and worker data pooling (workers used SARs to combine ~1.5M… | ||
| The future of technology is about more than AI: A conversation about right sized technology | Claire Pershan, Benoît Courty, Nadia Nadesan, Agnes Crepet | 01h 16m |
Mozilla-backed projects present concrete alternatives: an open-source meter that quantifies training and usage emissions (Bloom ~25 tons CO2; Meta model ~2,000… | ||
| What is so special about special categories of data? | Brendan Van Alsenoy, Gianclaudio Malgieri, Ruth Boardman, Anne Debet, Stephane Kolanowski | 01h 20m |
Court of Justice case law treats indirect inferences as falling under Article 9 and multiple judgments (at least four) expand the boundary of special… | ||
| Debating ethical GenAI for education: sector-governed solutions and critique | Debby Kappetijn, Sjoera Nas, Julian Kunkel, Cynthia Liem | 01h 13m |
Dutch EduGenAI builds a SURF‑hosted intermediary so institutions pick open‑source or commercial LLMs, filter queries for privacy, and attach deep source quotes… | ||
| Unpacking the real world impact of the Digital & AI Omnibus - what’s at stake and who benefits? | Valentina Pavel, Karolina Mojzesowicz, Max von Thun, Orla Lynskey, Laura Brodahl | 01h 18m |
Package promises a €5 billion cut in administrative burden and consolidation of five non‑personal‑data laws into a single Data Act, plus a centralized… | ||
| Simplification for Whom? Unpacking the Consumer Impact of the Digital Omnibus. | Cláudio Teixeira, Finn Lützow-Holm Myrstad, Diana Vlad-Calcic, Andreea Șerban, Romain Robert | 01h 21m |
Proposal claims faster market certainty but relies on a 200‑page staff document instead of a full impact assessment and meets a critical joint opinion from… | ||
| nothing matches | ||