Thierry Vandenbussche

Thank you Daniel! It was an honor and a pleasure to have you at our conference. The room was jam packed (twice!) with a cpdp community (and myself), eager to hear you speak. Hope to see you again on our stage next year. #cpdp2025 #cpdpcultureclub #cpdp2026 #cpdpbookclub

Protecting the Digital Rights of Asylum Seekers and Refugees As displaced populations increasingly interact with technologies, effective digital rights protection is more urgent than ever. This panel discusses the role data protection law plays in safeguarding the rights of asylum seekers and refugees. It examines the legal and practical challenges that arise in ensuring privacy, consent, and fairness for these vulnerable individuals. Our panel aims to foster a collaborative dialogue between academia (particularly researchers of the AFAR project), NGOs, and data protection authorities to close gaps between law and practice and to empower displaced individuals to exercise their digital rights. To create a dynamic session, we will invite stakeholders from the fields of Data Privacy and New Technologies to attend our panel as guests. These stakeholders will be engaged during the Q&A session to provide additional perspectives and foster a vibrant, interdisciplinary exchange of ideas. Questions to be answered: - What specific challenges do asylum seekers and refugees face in enforcing their digital rights? - How can data protection officers (DPOs) and related professionals make use of emerging regulations like the AI Act to safeguard privacy and fairness for asylum seekers and refugees? - What role does collaboration among data protection authorities, NGOs, and academia play in protecting digital rights for displaced populations? - How can digital rights frameworks for asylum seekers and refugees be strengthened to address the challenges posed by surveillance and automation? Organised by Centre for Fundamental Rights - Hertie School with Cathryn Costello (moderator), FRANCESCA PALMIOTTO, Derya Ozkul, Joanna Parkin, Eleftherios Chelioudakis More information: https://cpdp.be/2851

Protecting the Digital Rights of Asylum Seekers and Refugees

Organised by @hertiecfr.bsky.social with @profccostello.bsky.social (moderator), @francescapalmiotto.bsky.social, @deryaozkul.bsky.social, Joanna Parkin, Eleftherios Chelioudakis

More information: cpdp.be/2851
#CPDP.ai #CPDP2025 #asylum

"More than Buzzwords: the Vital Connection Between (Personal) Data, AI and Digital Public Infrastructures" Data, personal and otherwise, are often framed as both an enabler of technological innovation and digital transformation and warranting limitations in the case of data governance more generally and protection as a fundamental right of individuals when it comes to data protection. Looking back at the landscape of global governance of tech during the year 2024, AI was central but related subjects such as Digital Public Infrastructure also gained prominence, from the G20 to various UN forums and processes to national-level debates. This panel will discuss the most recent developments in global governance forums, their impacts on domestic regulation and governance, the role of data, including personal data, in driving innovation, but also the learnings from past and current efforts to govern data and protect the fundamental right to data protection with new challenges moving forward. Questions to be answered: - How, if at all, are data governance and protection integrated in the case of DPIs and the current frameworks, for example under UN auspisces? - What's the panel's assessment of the proposed frameworks for data governance (and data protection) connected to AI and DPIs at different levels internationally? - What are lessons data protection can lend to broader discussions on data-centered tech governance? - Are there novel challenges, particularly AI, that current frameworks (for norms and governance) fail to adress, requiring entirely new conceptions and approaches? Organised by Data Privacy Brasil with Bruno Bioni (moderator), Adeboye Adegoke, Alison Gillwald, Marietje Schaake More information: https://cpdp.be/2567

"More than Buzzwords: The Vital Connection Between (Personal) Data, AI and Digital Public Infrastructures"

Organised by Data Privacy Brasil with Bruno Bioni (moderator), Adeboye Adegoke, Alison Gillwald, @marietjeschaake.bsky.social

More info: cpdp.be/2567

#CPDP.ai #CPDP2025 #TheWorldisWatching

"Beyond Algorithmic Management: Will the AI Act, the Platform Work Directive and the GDPR Be Enough to Guarantee Workers’ Digital Rights?" In the employment context, both the AI Act and the Directive on Improving Working Conditions in Platform Work introduce rights and obligations concerning the use of AI systems, particularly in automated monitoring and decision-making. While both frameworks intersect with the GDPR, their scope and application differ. The Platform Work Directive applies exclusively to platform workers, whereas the AI Act addresses mainly high-risk AI systems, and even then with important exemptions and ambiguities in scope. This panel will explore whether the existing EU legislative framework provides sufficient safeguards for workers in an increasingly automated work, or whether additional or targeted regulation is necessary to fill legal and practical gaps. The discussion will also consider the experience of legal practitioners regarding recent decisions by Data Protection Authorities on labour-related investigations, and whether these cases can help clarify obligations or address enforcement challenges Questions to be answered: - How can the AI Act be effectively implemented in the employment context to ensure adequate protection, considering both high-risk and non-high-risk AI systems? - Are the requirements on human oversight adequate for employment? - Can workers genuinely exercise the right to contest automated decision making? - Is there a need for a legal distinction between worker lawful monitoring and surveillance? Organised by European Trade Union Institute (ETUI) with Aida Ponce Del Castillo (moderator), Anastasia Siapka, Anton Ekker, Michele Mole Mole, Sandy JJ Gould More information: https://cpdp.be/5202

Beyond Algorithmic Management: Will the AI Act, the Platform Work Directive & the GDPR be Enough to Guarantee Workers’ Digital Rights?

Organised by @etui.bsky.social w @aida.follows.technology (moderator), @siapka.bsky.social, Anton Ekker, Michele Mole Mole, Sandy JJ Gould

More info: cpdp.be/5202

"The World Is Watching – Us Lawyers?" Surveillance by security authorities, especially intelligence services, is on the rise. Simultaneously, lawyers are increasingly seen as „enablers“ in areas such as money laundering and tax evasion and therefore targeted in legislative initiatives. In 2021, the ECtHR ruled in two cases against the UK and Sweden: mass surveillance of communications without cause is incompatible with the ECHR unless human rights safeguards are in place – meaning: Big Brother can watch, the safeguards are decisive.Still, mass communications surveillance, skimming of data from private service providers and the information exchange between intelligence services do not stop at communication protected by legal privilege. As Lawyers are treated as „enablers“ of criminal or unlawful acts, we would like to discuss their vital role in granting access to justice, necessary limits of surveillance and imposed duties in the interest of preserving the rule of law. Questions to be answered: - Are we getting closer to a European standard for surveillance of internet-based communication? - How does lawyer-client confidentiality need to be better protected in practice? - Are lawyers a risk to society as „enablers“ of unlawful acts? - What limits do we need when it comes to laws that put lawyers under duties to police their clients? Organised by PinG (Privacy in Germany) & DAV (Deutscher Anwaltverein) with Niko Härting (moderator), Chloé Berthélémy, Anna Drozd, Leonardo Cervera Navas, Thorsten Wetzling More information: https://cpdp.be/2506

"The World Is Watching – Us Lawyers?"

Organised by PinG (Privacy in Germany) & DAV (Deutscher Anwaltverein) with @nikohaerting.bsky.social (moderator), Chloé Berthélémy, Anna Drozd, Leonardo Cervera Navas, @twetzling.bsky.social

More info: cpdp.be/2506

#CPDP.ai #CPDP2025 #TheWorldisWatching #CPDP

"Balancing Data Protection and Workplace Justice: GDPR’s Role in Employee Rights and Representation" This panel discusses the relationship between the GDPR and workers’ rights, with particular emphasis on the right to association. It examines the obligations trade unions bear in managing sensitive data, such as membership and political beliefs, and their impact on their daily operations, and advocacy efforts. The discussions analyse whether these regulatory frameworks may inadvertently impact unions' ability to advocate effectively on behalf of workers. Another key focus are the safeguards provided by the GDPR against employer access to union membership data, assessing the risks of misuse and potential cases of worker surveillance, while examining whether access can ever be justified. The panel further explores the GDPR’s implications for union-led collective enforcement under Article 80. Ultimately, the discussions aim to propose a more nuanced regulatory approach—one that strikes a careful balance between safeguarding personal data and upholding essential workers’ rights. Questions to be answered: - How can the right to personal data protection be balanced with the right to organize? What obligations do trade unions have for managing special category data? - How does the GDPR shield workers’ data rights in the workplace, and what has been its impact on litigation involving workers’ data rights? - What are the implications for collective enforcement under Article 80 GDPR? Can trade unions lead such collective enforcement? - How is workplace surveillance evolving in the digital age, and where should regulatory “red lines” be drawn? Organised by Centre for IT and IP Law (CiTIP) - KU Leuven with Irmak Erdoğan Peter (moderator), Nikos Papadopoulos, Larisa Munteanu, Eva King, Aída Ponce Del Castillo More information: https://cpdp.be/5045

Balancing Data Protection & Workplace Justice: GDPR’s Role in Employee Rights and Representation

Organised by Centre for IT and IP Law (CiTIP) - KU Leuven with Irmak Erdoğan Peter (moderator), Nikos Papadopoulos, Larisa Munteanu, Eva King, @aida.follows.technology

More info: cpdp.be/5045

#CPDP.ai

"AI Vulnerability and Dependency on Social Media" Social media platforms are increasingly becoming spaces of structural dependency and digital addiction, amplifying human vulnerabilities. These dynamics raise pressing questions about the adequacy of current legal and social tools to protect individuals in an age of pervasive connectivity and AI-driven ecosystems. This panel will critically explore the challenges and opportunities in addressing human vulnerability online. Bringing together legal scholars, policymakers (the AI Office and national DSA enforcement authorities), and social scientists, this panel promotes a multidisciplinary dialogue to evaluate the effectiveness of the current regulatory landscape and propose pathways towards a more empathetic and rights-centred digital ecosystem. This session will provide insights for academics, practitioners, and regulators interested in the intersection of technology, human rights, and vulnerability. Join us for an in-depth exploration of the challenges and the way forward in safeguarding dignity and fairness in the digital age. Questions to be answered: - Do we have enough legal and social tool to assess human vulnerability on social media, especially considering new forms of structural dependency and digital addictions? - How is human dependency on social media reshaping GDPR consent freedom, especially considering pay-or-consent debates? - How is the AI Act addressing the different nuances of human vulnerabilities enhanced by AI systems on social media? - Are the EU Digital Fairness Act and the DSA risk assessment enough to assess new forms of online vulnerability? Organised by RESOCIAL Project (Leiden University) & VULNERA (Brussels Privacy Hub) with Gianclaudio Malgieri (moderator), Kim van Sparrentak, Damian Clifford, Itxaso Domínguez de Olazábal, Adele Zeynep Walton, Constanta Rosca More information: https://cpdp.be/2641

"AI Vulnerability and Dependency on Social Media"

Organised by RESOCIAL (Leiden Uni.) & VULNERA ( @brusselsprivacyhub.bsky.social ) with Gianclaudio Malgieri (moderator), @kimvsparrentak.bsky.social, Damian Clifford, Itxaso Domínguez, Adele Zeynep Walton, Constanta Rosca

More info: cpdp.be/2641

Navigating Regulatory Challenges in Soft Biometric Technologies The use of biometric technologies is becoming increasingly normalized. The adoption of “soft biometrics” has grown significantly in recent years. Unlike traditional biometrics, such as fingerprints or facial recognition, soft biometrics often lack the distinctiveness to identify individuals but are used to categorize people based on physical or behavioral traits. Increasingly, public spaces deploy these technologies to detect potential incidents like theft, violence or other unwanted activities. Soft biometrics raise urgent regulatory challenges. As these technologies become normalized, what risks arise from their use in public spaces? How should Data Protection Authorities (DPAs) tackle this phenomenon? What legal tools do DPAs have at their disposal to adequately address these challenges? Together with civil society and academia, the Dutch DPA will explore these questions during this panel. Questions to be answered: - What data protection and fundamental rights risks are associated with the use of soft biometrics in public spaces, and what ethical and legal concerns do they raise? - In what ways can the GDPR be strategically leveraged to mitigate these risks? - What other legal tools, frameworks or approaches are available to DPAs to effectively respond to the challenges posed by emerging technologies as such? - How can DPAs effectively collaborate with civil society and academia to address these issues and foster public awareness? Organised by Autoriteit Persoonsgegevens (Dutch DPA) with Ferdi Konyali (moderator), Catherine Jasserand, Bilgesu Sumer, Oyidiya Oji, Stefan Kulk More information: https://cpdp.be/2874

"Navigating Regulatory Challenges in Soft Biometric Technologies"

Organised by Autoriteit Persoonsgegevens (Dutch DPA) with Ferdi Konyali (moderator), Catherine Jasserand, Bilgesu Sumer, Oyidiya Oji @enareurope.bsky.social, Stefan Kulk

More info: cpdp.be/2874
#CPDP.ai #CPDP2025 #TheWorldisWatching

Amidst much fanfare on the need for a ‘competitive’ Europe, geo-political pressures and a clear intention to pursue industrial policy & security approaches, we are concerned that regulating for the ‘common good’ and respect for human rights have been deprioritised. The AI Liability Directive will be withdrawn and with the rise of purpose general-purpose AI (GPAI) technologies, the EU has developed regulatory responses (e.g. the voluntary AI Code of Practice) which have been criticised as little more than window-dressing with negligible input from civil society. There is a growing risk that meaningful guardrails will be sacrificed in favour of approaches that maintain the status quo power imbalances between technology companies and people affected by their products and services. This has implications for the economy, democracy, and society, which go well beyond the industrial and economic policy aims championed by the Draghi Report. Questions to be answered: - How can we ensure that human rights and democracy considerations remain central to AI governance frameworks as the EU shifts focus towards industrial policy and competitiveness? - How should regulators address the underlying infrastructure concentration, and what implications does cloud dependence have for meaningful AI oversight? - What lessons can be drawn from previous attempts at technology (self)-regulation that might inform the development of more effective guardrails for general-purpose AI systems? - As Europe navigates tensions between encouraging innovation and ensuring appropriate safeguards, what role should civil society organizations and others play in counterbalancing industry influence on AI governance frameworks? How can these organizations most effectively advocate for rights Organised by Article 19 with Corinne Cath (moderator), Kai Zenner, Seda Gürses, Maria-Luisa Stasi, Maria Donde

"A Stress Test for the EU’s Digital Rule Book: Ensuring AI Governance is Grounded in Rule of Law and Fundamental Rights"

Organised by @article19law.bsky.social with @ccs.bsky.social (moderator), Kai Zenner, Seda Gürses, Maria-Luisa Stasi, @interdonde.bsky.social

More info: cpdp.be/4289
#CPDP2025

"From Food Commons to Data Spaces: Shaping Data Governance for and with Sustainable Food Systems" This panel examines data governance in the agri-food sector, focusing on recent EU regulations that have fostered the creation of data spaces. These initiatives provide an opportunity to revisit the concept of commons, long associated with food systems, and explore the potential of data spaces as inclusive governance models for sustainable food systems. The discussion will address critical issues surrounding data flows, access, and sharing practices, examining the roles of public, private, and civil society actors in shaping agri-food data governance. Drawing on theoretical perspectives, fieldwork, and case studies in agricultural data spaces, the panel will explore how frameworks such as the GDPR, data regulations influence the balance between public and private interests. This session aims to offer insights into fostering innovation, equity, and sustainability in food data governance by unpacking data governance structures and the commons. Questions to be answered: - After the user-centric EU regulations like GDPR and the Data Act, do we need to regulate B2B data re-use conditions? - How can data spaces foster trust among stakeholders, what mechanisms are necessary to ensure that these spaces remain transparent and inclusive? - How can we balance data holder rights with access and reuse opportunities to drive innovation and growth in the farm-to-fork chain? - What mechanisms or safeguards can balance stakeholders' interests, foster collaboration, and drive innovation while preventing free-riding and preserving data collection incentives? Organised by Wageningen Social and Economic Research with Pia Groenewolt (moderator), Can Atik, Monja Sauvagerd, Elena Spolidoro, Seth van Hooland More information: https://cpdp.be/4340

"From Food Commons to Data Spaces: Shaping Data Governance for and with Sustainable Food Systems"

Organised by Wageningen Social and Economic Research with @piagro.bsky.social (moderator), Can Atik, Monja Sauvagerd, Elena Spolidoro, Seth van Hooland

More info: cpdp.be/4340

#CPDP.ai #CPDP2025

"The Transformation of EU Cybersecurity Law" In recent years, cyber policy has progressively emerged as a distinct policy field at EU level, as exemplified through the various legal instruments adopted and under negotiations. Such legal instruments involve the revision of the NIS Directive, as well as the Cybersecurity Act, the Cyber Resilience Act and the Cyber Solidarity Act. In addition, several EU legal instruments, such as DORA and the AI Act also provisionson cybersecurity. This panel aims to address questions regarding the evolution of EU cybersecurity law in recent years and explore questions regarding its coherence, its benefits and challenges in implementation. Questions to be answered: - What are the drivers behind the evolution of the EU cybersecurity law and policy? - How and to what extent has scope of EU cybersecurity law been expanded in recent years? - To what extent is the development of EU cybersecurity law cohesive and what are the challenges for its implementation? - What is the future of EU cybersecurity law? Organised by University of Luxembourg with Niovi Vavoula (moderator), Elaine Fahey, Marco Almada, Suzanne Nusselder, Laura Brodahl More information: https://cpdp.be/4404

"The Transformation of EU Cybersecurity Law"

Organised by @uni.lu with Niovi Vavoula (moderator), @faheye.bsky.social, @marcoalmada.com, Suzanne Nusselder, Laura Brodahl

More information: cpdp.be/4404

#CPDP.ai #CPDP2025 #TheWorldisWatching #CPDP #EU #Cybersecurity

"Fundamental Rights Impact Assessments under the EU AI Act: Who, What, and How" The EU AI Act mandates Fundamental Rights Impact Assessments (FRIA) for high-risk AI systems, establishing them as a critical safeguard for fundamental rights like privacy, non-discrimination, and human dignity. This panel examines the legal, practical, and ethical dimensions of FRIA, addressing key questions: Who conducts these assessments? How are risks identified and mitigated? And what ensures their substantive, not merely procedural, value? Using real-world examples, such as the systemic risks of bias in creditworthiness assessments and surveillance in AI applications like facial recognition, the panel will analyze the challenges of aligning FRIA with EU law while promoting accountability and transparency. The discussion will propose a comprehensive FRIA model, offering actionable strategies for implementation and compliance. By uniting experts from academia, industry, and institutions, the panel aims to ensure fundamental rights are embedded into the governance of AI systems. Questions to be answered: - Who conducts FRIA, and what roles do industry, academia, and civil society play in ensuring their effectiveness? - How can FRIA identify and mitigate systemic risks, such as bias in creditworthiness assessments and surveillance in facial recognition technologies? - What mechanisms ensure that FRIA go beyond procedural formalities to deliver substantive protection of fundamental rights like privacy, non-discrimination, and human dignity? - What actionable models and strategies can refine FRIA implementation to align with EU law and ensure accountability, transparency, and compliance in high-risk AI systems? Organised by Bocconi University with Oreste Pollicino (moderator), Lokke Moerel, Yordanka Ivanova, Neil Richards, Andrea Cosentini, Federica Paolucci More information: https://cpdp.be/4732

Fundamental Rights Impact Assessments under the EU AI Act: Who, What, and How

Organised by Bocconi University with Oreste Pollicino (moderator), Lokke Moerel, Yordanka Ivanova, Neil Richards, Andrea Cosentini, Federica Paolucci

More information: cpdp.be/4732
#CPDP.ai #CPDP2025 #TheWorldisWatching

Can a Fair Power Balance be Achieved in the Web Ecosystem with the Help of Computer Science Research? Today’s websites and apps are complex applications built with numerous intermediary services. Such services help website owners to build their websites/apps, help them integrate third-party advertising services, or propose compliance and monetization solutions. While these services often facilitate online tracking and collection of personal data, they sometimes include manipulative practices aimed at website owners, yet it’s unclear how such services are covered the ePrivacy/GDPR or the DSA. As a result, intermediary services may deflect responsibility onto other actors, placing compliance obligations mostly on website owners. In this panel, we present the chains of dependencies between intermediary services down to website/app owners, analyze the current EU regulatory framework, identify challenges for website owners and discuss how research from Computer Science can help improve compliance. Questions to be answered: - Do GDPR and DSA properly cover all the data processing and manipulative practices of intermediate services and ensure the fair balance of power? - How usable privacy research can contribute to better understanding the power imbalance between intermediate service providers and website/app owners and improving compliance? - How difficult is to integrate intermediary services in website/app products and what challenges companies face when ensuring compliance? - What technical tools from Computer Science can help website/app owners and regulators to audit compliance with GDPR and DSA? Organised by Inria with Nataliia Bielova (moderator), Wojciech Jukowski, Sepideh Ghanavati, Cristiana Santos, Karel Kubicek More information: https://cpdp.be/4865

Can a Fair Power Balance be Achieved in the Web Ecosystem with the Help of Computer Science Research?

Organised by Inria with Nataliia Bielova (moderator), Wojciech Jukowski, @sepi-gh.bsky.social, Cristiana Santos, Karel Kubicek

More information: cpdp.be/4865
#CPDP.ai #CPDP2025 #TheWorldisWatching

"Global Perspectives of Regulating Genetic Data in Scientific Research: What Else Beyond Privacy?" Genomics research drives advancements in precision medicine, clinical diagnostics, and treatments. However, using genetic data in research encounters complex legal, ethical, and regulatory challenges worldwide. The EU’s data protection framework sets special rules for genetic data processing in research, while the recent initiative of the European Health Data Space (EHDS) intensifies debates over secondary use. Beyond privacy, genetic data holds unique legal attributes with societal, familial, and national implications, which is underemphasized in EU law but evident in other jurisdictions. For example, China views genetic data as a critical national resource tied to bio-sovereignty and security; whereas the US adopts a market-driven approach to boost biotechnology and balance privacy, with growing biosecurity concerns amid shifting geopolitics. This panel aims to explore the changing general nature of genomics and discuss genetic data governance in research through these global perspectives. Questions to be answered: - How does the EU’s existing legal framework(s) address the use of genetic data in scientific research (such as the GDPR and the EHDS)? - What legal attributes do genetic data possess beyond privacy, and how does the EU framework address (or overlook) these attributes? - How does China’s biosecurity approach shape its governance over genetic data, and what are the implications for international scientific collaboration in genomics? - What are the implications of the US regulatory approach to genetic data for research and innovation? Organised by Health & Ageing Law Lab (HALL), VUB with Andrea Martani (moderator), Paul Quinn, Ruoxin Su, Johanna Rahnasto, Róisín Costello More information: https://cpdp.be/4018

"Global Perspectives of Regulating Genetic Data in Scientific Research: What Else Beyond Privacy?"

Organised by Health & Ageing Law Lab (HALL), VUB with Andrea Martani (moderator), @paulquinnbxl.bsky.social, @ruoxinsu.bsky.social, Johanna Rahnasto, @racostello.bsky.social

More info: cpdp.be/4018

"Common EU Data Spaces: Fundamental Rights, Competition and Innovation in Digital Ecosystems" As Europe becomes increasingly digitalised, interconnected, and data-driven, the pursuit of innovation is heralded as a means to enhance citizen welfare and strengthen global economic standing. Yet, in this landscape, fundamental rights can sometimes seem negotiable. This panel critically examines the transformative role of EU Common Data Spaces in shaping digital ecosystems and how this framework interacts with fundamental rights on the one hand, and competition law and industrial policy on the other. Beyond market dynamics, these discussions probe Europe’s core values. Grounded in the principles of fundamental rights, this session evaluates whether emerging EU data policies can support an equitable and innovative digital economy in which individual, corporate, and societal needs do not compete but co-exist. Questions to be answered: - Will EU Data Spaces democratize access to data or entrench the dominance of digital giants? - How can regulations foster both fair competition and meaningful innovation? - As sensitive personal data generates immense value, what risks and opportunities arise for individuals? - How can the value of the data be shared among those who contributed to its creation? Organised by ALTI - VU Amsterdam with Georgiana Mirza (moderator), Paola Cardozo Solano, Johan Keetelaar, Anna Colom, Alberto Di Felice More information: https://cpdp.be/2094

"Common EU Data Spaces: Fundamental Rights, Competition and Innovation in Digital Ecosystems"

Organised by ALTI - VU Amsterdam with Georgiana Mirza (moderator), Paola Cardozo Solano, Johan Keetelaar, Anna Colom, Alberto Di Felice

More info: cpdp.be/2094
#CPDP.ai #CPDP2025 #TheWorldisWatching #CPDP

"Strengthening Trust in Computing Technologies For Detecting Illegal Deception Online" Automation is helping various actors of the data economy to streamline the large-scale detection of illegal deceptive practices online, gather evidence of wrongdoing, enforce actions, or propose remedies. This nascent field of research and practice raises questions concerning the quality of data used to train the tools, the reliability of their outputs, their usability, sustainability, and scalability, as well as other prerequisites that would instill trust in the use of such computing technologies. Questions to be answered: - 1.How might the inputs (e.g. datasets) and the outputs (e.g. recommendations) of the detection tools be reliable, verifiable and replicable? - 2.How can the poor maintenance and monitoring of the tools increase privacy and other risks, and how might these be mitigated? - 3.Which requirements would contribute to their adoption? - 4.In which processes can they bring added value and where they cannot? Organised by Interdisciplinary Center for Security Reliability and Trust (SnT) of the University of Luxembourg with Claudia Negri Ribalta (moderator), Arianna Rossi, Vincent Toubiana, Stefan Schauer, Trushant Mehta More information: https://cpdp.be/4794

"Strengthening Trust in Computing Technologies For Detecting Illegal Deception Online"

Organised by @uni.lu with @csnegri.bsky.social (moderator), Arianna Rossi, @vtoubiana.bsky.social, Stefan Schauer, Trushant Mehta

More information: cpdp.be/4794

#CPDP.ai #CPDP2025 #TheWorldisWatching #CPDP

The Political Economy of Artificial Intelligence: how Generative AI Threatens the Renewable Energy Transition, and who Stands to Benefit from it You’ve read the news: A Three Mile Island reactor will be restarted to power Microsoft's AI operations (this was the site of a nuclear meltdown in 1979), Google’s emissions climbed nearly 50% over the last five years due to AI energy demand, and the only thing impressive about Amazon’s claim that it uses green energy is the chutzpah with which it lies about its creative accounting. Still, if you think you have a good idea of generative AI’s resource demands, think again. The snippets above only present the tip of the iceberg. To show what’s at stake, we will not only present the latest evidence on energy demand for the entire value chain of AI, including hardware production – we will also explain how it threatens the transition to renewable energy and the stability of the grid, aka critical infrastructure. Questions to be answered: - What do we know about resource consumption of generative AI? - What implications does the resource consumption have for the green transition? - What implications does the resource consumption have for the development path of Artificial Intelligence (what alternatives to “brute force” large models and Deep Learning based on very large datasets are on the table)? - What governance tools are needed and available to reconcile AI develpoment with planetary boundaries? Organised by AlgorithmWatch with Matthias Spielkamp (moderator), Jill McArdle, Fanny Hidvégi, Claude Turmes, Boris Ruf More information: https://cpdp.be/4117

The Political Economy of Artificial Intelligence: How Generative AI Threatens the Renewable Energy Transition

Organised by AlgorithmWatch with @spielkamp.bsky.social (moderator), @jillmcardle.bsky.social, Fanny Hidvégi, Claude Turmes, Boris Ruf

More info: cpdp.be/4117
#CPDP2025 #TheWorldisWatching

"AI Governance in Africa: Bridging Trust, Ethics, Equity and Regulation" There is a growing rise in the use of AI technologies across various sectors, which raises various ethical and regulatory concerns for the lawmaker, the users and the developers. This panel will examine the intersection of AI, ethics, security, governance, and the unique challenges and opportunities in the African context. Experts will explore how AI systems can be designed to align with African values, foster trust, and address ethical and regulatory gaps. The session will also examine geopolitical dynamics influencing AI development, particularly the competing roles of global powers and the implications for Africa’s digital sovereignty. Additionally, panelists will consider the need to address underlying inequalities, such as access to technology and the internet, to ensure inclusive AI development that drives innovation and sustainable growth across the continent. Questions to be answered: - What ethical principles which align with African cultural and societal values should guide the use of AI in Africa, particularly in sensitive sectors like health, finance, and governance? - How can cross-border regulatory collaboration address the challenges of AI governance in Africa? - How should African governments balance investments in AI to address fundamental inequalities, such as internet access and digital literacy? - What steps can African governments take to transition from being consumers of foreign AI technologies to becoming innovators in the global AI ecosystem? Organised by University of Bradford and CPDP Africa with Tami Koroye (moderator), Karine Caunes, Yomi Ajibade, Melody Musoni, Mercy King'ori More information: https://cpdp.be/4375

"AI Governance in Africa: Bridging Trust, Ethics, Equity and Regulation"

Organised by University of Bradford and CPDP Africa with Tami Koroye (moderator), Karine Caunes, Yomi Ajibade, Melody Musoni, Mercy King'ori

More information: cpdp.be/4375

#CPDP2025 #CPDP.ai #TheWorldisWatching #CPDP

"Future of Social Media: What’s the Recipe for Pluralism, Long-term User Value and Safety in Recommender Systems?" Social media ecosystem has been dominated by a handful of tech companies, shaping the flow of information and limiting innovation. The dangers have never been clearer. Their algorithms decide which content is sourced and indexed, which posts rank higher in newsfeeds, which topics will be trending or censored. This power should come with great responsibility. Meanwhile, very large online platforms stick to a reckless business model, optimising their recommender systems for short-term user engagement and advertiser value. This design choice has been criticised by civil society and independent researchers because engagement-based ranking disproportionately amplifies low-quality, misleading and sensational content. Can social media platforms deliver long-term user value and support pluralism? How to make design choices that affect our fundamental rights, civic discourse and public health more responsible? The panel will discuss strategies for transforming a closed social media ecosystem into an open market, benefiting consumers/citizens, ethical innovators and publishers. Questions to be answered: - What changes in the design of social media recommender systems will promote long-term user value and pluralism? - How to protect individual vulnerabilities from being exploited by recommender systems? - What tools empower social media users to curate their own experience? What is blocking their uptake by very large social media platforms? - How to impose/promote interoperability and competition in the social media market in the EU? Organised by Panoptykon Foundation with Katarzyna Szymielewicz (moderator), Alissa Cooper, Ian Brown, Marc Faddoul, Ulrik Lyngs More information: https://cpdp.be/3715

Future of Social Media: What’s the Recipe for Pluralism, Long-term User Value and Safety in Recommender Systems?

Organised by Panoptykon Foundation with Katarzyna Szymielewicz (moderator), @alissacooper.bsky.social, @ianbrown.tech, @marcfaddoul.com, Ulrik Lyngs

More information: cpdp.be/3715
#CPDP

"Correcting Wrong (AI) Data: Can the Right to Rectification be of Help?" This panel intends to discuss an under-explored data subject right, the right to rectification of article 16 GDPR. The focus lies on the role the right can have as an instrument of contestation of inadequate evaluations concerning an individual, using AI inferences as a case study. It will take the audience on a journey throughout the history of the right, from its application by national data protection authorities and courts to traditional pen and paper assessments to contemporary automated AI ones. The goal is to uncover the purpose of this right, clarify the meaning of ‘accuracy’ and ‘completeness’ and elucidate what ‘rectification’ entails in practical terms, especially in relation to subjective data. Against this background, the main question raised is: can the right to rectification be used to challenge wrong (AI) assessments concerning an individual and, if yes, how? Questions to be answered: - Can the right to rectification be applied to personal data in the form of (AI) inferences ? - Why is the application of the right to personal data in the form of (AI) inferences contentious? - Which accuracy and completeness standards should be used for the purposes of article 16 GDPR ? - What are the practical implications (for the controller, data subject and enforcement body) of applying the right to personal data in the form of (AI) inferences? Organised by Open Universiteit with Andreas Hӓuselmann (moderator), Gloria Gonzáles-Fuster, Kleanthi Sardeli, Stephanie Rossello, Anouk Focquet More information: https://cpdp.be/2779

"Correcting Wrong (AI) Data: Can the Right to Rectification be of Help?"

Organised by Open Universiteit with Andreas Hӓuselmann (moderator), @ggf.bsky.social, Kleanthi Sardeli, Stephanie Rossello, Anouk Focquet

More information: cpdp.be/2779

#CPDP.ai #CPDP2025 #TheWorldisWatching #CPDP

Designed to Hook: The Roots of Platform Addiction and Ways Forward The issue of addictive design has gained significant attention within the European Union. Recently, MEP Kim van Sparrentak highlighted this concern in an initiative report, and the European Commission announced its upcoming Digital Fairness Act, which will include provisions addressing addictive design. The challenge is clear: growing numbers of people, amongst them are minors, are facing social media addiction. Yet, the path to a solution remains complex. Unlike other addictive substances, social media itself is not inherently harmful. This raises a pressing question: how can we reshape social media design through legislation to make it less addictive, without compromising its positive aspects? Questions to be answered: - What makes design addictive? - Can regulating platform design effectively address social media addiction? - Should we take different approaches to social media addiction solutions for minors versus adults? - Which social media design patterns could the EU consider for regulation? Organised by Bits of Freedom with Evelyn Austin (moderator), Caroline Sinders, Romayne Gab el Rab, Kim van Sparrentak, Maryant Fernández More information: https://cpdp.be/2063

"Designed to Hook: The Roots of Platform Addiction and Ways Forward"

Organised by @bitsoffreedom.bsky.social with Evelyn Austin (moderator), @carolinesinders.bsky.social, Romayne Gab el Rab, @kimvsparrentak.bsky.social, Maryant Fernández

More information: cpdp.be/2063
#CPDP2025 #TheWorldisWatching

As new tech regulations start to be implemented and enforced, there has so far been relatively little focus on the role of private enforcement. Private enforcement, through individual litigation and collective action, can significantly enhance the protection of individual rights and platforms obligations. It has the potential to complement public oversight by addressing enforcement gaps, while providing individuals and civil society with a means to seek redress for harms and influence regulatory agendas and policies from the ground up. Important knowledge gaps remain regarding the private enforcement of tech regulations. Drawing from their experience in competition law, DSA/DMA and GDPR enforcement, panellists will offer insights on legal and practical questions relating to private enforcement of new tech regulation. Questions to be answered - Enforcing the Digital Services Act and other tech regulations through individual or collective actions before jurisdictions, and with what remedies available? - How does private enforcement interact with public enforcement by national regulators and the European commission? - What are the avenues for private enforcement through collective redress? What are the procedural hurdles related to jurisdiction, standing and admissibility? - What are paths of least resistance for civil society to strategically litigate against platforms? How can we bolster capacity for CSOs to bring cases across member states?

"Enforcing EU's Digital Regulations in Court - How Can Civil Society Step in?"

Organised by Luminate with Emmanuelle Debouverie (moderator), @jvh.bsky.social, @arcapde.bsky.social, Simone Ruf, Ursula Pachl

More information: cpdp.be/3455

#CPDP2025 #TheWorldisWatching #CPDP.ai #CPDP

"Future Digital Infrastructures for Climate Change: A Solution That Brings Along Its Own Challenges?" This panel investigates the digitalisation - climate action relationship and discusses the response of law and policy to it. Digitalisation is touted as the solution for environmental challenges. The EU policy considers digital infrastructures integral to achieve the European Green Deal’s net-zero goals ("twin transition"). But these create new risks and dependencies as they implicate power dynamics at the intersection of digital economy, geopolitics, security. This panel investigates some of these frictions focusing on two technologies: foundation models and digital twins. For example, foundation models can provide novel climate insights, but they can also transfer bias in context and training data into climate solutions and cement market logics into sustainability efforts. Digital Earth applications (e.g. DestinE), bringing together sensing and computing, can change environmental decision making processes and can have potential uses for disaster prevention, migration management and security. How could the law take account of these dynamics going forward?

Future Digital Infrastructures for Climate Change: A Solution That Brings Along Its Own Challenges?

Organised by Center for Quantum & Society, Quantum Delta NL with @jvh.bsky.social (moderator), Golestan (Sally) Radwan, Hendrik Hamann, Eric Monjoux, Bengi Zeybek

More info: cpdp.be/4217

#CPDP2025

Elevating AI Oversight: The Crucial Role of Regulatory Sandboxes and Competent Authorities Under the AI Act The EU AI Act introduces regulatory sandboxes to foster innovation while ensuring compliance. However, the legal framework surrounding these sandboxes requires careful analysis. A key challenge is determining how these sandboxes will be supervised and by which authorities. This issue is intricately linked to the broader oversight structure of the AI Act, particularly the role of market surveillance authorities, which must be designated by Member States by August 2026. An equally pressing issue is the involvement of data protection authorities when personal data is processed within these sandboxes. This panel will examine how Member States can establish regulatory sandboxes that align with their oversight frameworks, foster effective collaboration between market surveillance and data protection authorities, and achieve a balance between innovation and robust supervision, ensuring regulatory sandboxes effectively support AI development while adhering to the AI Act’s provisions. Questions to be answered: - Which competent authorities should oversee sandboxes, and what roles should market surveillance authorities play? - How can data protection authorities be effectively integrated into sandboxes when personal data is being processed? - How can companies concern, such as intellectual property and confidentiality issues, be addressed so that trust can be built between them and regulators in the sandbox? - How could civil society be meaningfully integrated into the sandbox, and what role should it assume? Organised by FARI - AI for the Common Good Institute with Nathan Genicot (moderator), Thiago Moraes, Moltzau Alex, Sophie Tomlinson, Sam Jungyun Choi

"Elevating AI Oversight: The Crucial Role of Regulatory Sandboxes and Competent Authorities Under the AI Act"

Organised by @faribrussels.bsky.social with Nathan Genicot (moderator), Thiago Moraes, Moltzau Alex, Sophie Tomlinson, Sam Jungyun Choi

More information: cpdp.be/3327

#CPDP.ai #CPDP2025

"Data protection for European Law Enforcement: Taking Stock of the Relationship Between Privacy Rights and Effective Policing in a Challenging Technological Landscape" Law Enforcement DPOs face a myriad of challenges in their efforts to uphold privacy rights while ensuring effective policing. Some of the most pressing challenges include ensuring that only necessary data is collected for legitimate law enforcement purposes, and establishing protocols for the retention and deletion of data to prevent unnecessary storage and potential misuse. Balancing the need to share data between law enforcement agencies for effective collaboration and intelligence-sharing while safeguarding against unauthorized access, data breaches, and potential violations of privacy laws forms part of the DPO portfolio as well as assessing the ethical and legal implications of using advanced surveillance technologies such as facial recognition, drones, and biometric systems, including ensuring transparency, accountability, and compliance with privacy. Questions to be answered: - How can DPOs protect law enforcement databases and systems from cyber threats, hacking attempts, and data breaches, which could compromise sensitive information and undermine public trust in law enforcement agencies? - How can DPOs contribute to upholding the rights of individuals, including the right to privacy, freedom of expression, and due process, while enabling operational colleagues to successfully pursue criminal investigations? - What are concrete steps to demonstrating accountability, transparency, and adherence to ethical standards? - How can DPOs keep abreast of evolving legal and regulatory frameworks? Organised by Europol Data Protection Experts Network (EDEN) with Jekaterina Macuka (moderator), Daniel Drewer, Michael Armstrong, Marjolein Louwerse, Anna Pouliou

"Data Protection for European Law Enforcement"

Organised by Europol Data Protection Experts Network (EDEN) with Jekaterina Macuka (moderator), Daniel Drewer, Michael Armstrong, Marjolein Louwerse, Anna Pouliou

More information: cpdp.be/20087

#CPDP.ai #TheWorldisWatching #CPDP2025 #CPDP

Governing AI in Europe: Advancing Fundamental Rights through Regulatory Enforcement As the EU AI Act moves toward implementation, critical questions remain about its enforcement, scope, and impact on fundamental rights. This panel brings together policymakers, legal scholars, industry leaders, and civil society representatives to explore how AI governance in Europe ensures compliance with human rights protections while addressing risks like biometric surveillance, AI-driven discrimination, and regulatory gaps. With AI regulations emerging worldwide, what role will European AI governance play in shaping global norms? The discussion will focus on enforcement mechanisms, the role of data protection authorities, and cross-border implications. Questions to be answered: - How will the EU AI Act be enforced across different sectors, and what role will data protection authorities play? - What are the biggest challenges in ensuring AI regulation upholds fundamental rights? - How can Europe’s AI governance framework influence global regulatory approaches? - What mechanisms are needed to ensure transparency and accountability in AI decision-making? Organised by Center for AI and Digital Policy with Marc Rotenberg (moderator), Anne-Charlotte Recker, Julia Apostle, Karolina Iwanska

"Governing AI in Europe: Advancing Fundamental Rights Through Regulatory Enforcement"

Organised by Center for AI and Digital Policy with Marc Rotenberg (moderator), Anne-Charlotte Recker, Julia Apostle, Karolina Iwanska

More information: cpdp.be/19315

#CPDP2025 #TheWorldisWatching #CPDP.ai

"Is My Boss a Bot? The Role of Data Protection in Algorithmic Recruitment and Employment" Algorithms are hiring, firing and managing performance of workers all over the world. To support these AI decisions, increasing quantities and types of data are collected from workers through automated monitoring. This panel will explore the ways in which legal regimes can empower workers to individually and collectively control the use of their data, focusing on data protection law—including the principles of transparency and fairness. The panel will also examine the motivation for using AI to make decisions about recruitment and employment; whether AI-driven recruitment and employment practices can be fair; and how that can be achieved if so. The discussion will focus in particular on whether and how legal regimes can support and promote effective and fair deployment of algorithmic tools in the employment context. Questions to be answered: - Can algorithmic management of workers be effective and fair? - Is Article 22 GDPR sufficient to protect workers from unfair AI-driven employment practices? - What does AI explainability mean in the workplace? - Do workers need new or different data rights? Organised by Information Commissioner’s Office (ICO) with Declan McDowell-Naylor (moderator), Aislinn Kelly-Lyth, Halefom Abraha, Lindsey Zuloaga

"Is My Boss a Bot? The Role of Data Protection in Algorithmic Recruitment and Employment"

Organised by Information Commissioner’s Office (ICO) with Declan McDowell-Naylor (moderator), Aislinn Kelly-Lyth, Halefom Abraha, Lindsey Zuloaga

More information: cpdp.be/3166

#CPDP2025 #TheWorldisWatching

Over-enforcement or Under-protection: Can the AI Office Strike a Balance in the Enforcement of General Purpose AI? (Over-)Regulation is commonly perceived as stifling innovation, particularly in the competitive race to develop AI. The EU Commission finds itself in a challenging position, balancing the desires of GPAI providers who advocate for lenient enforcement with those who call for stronger measures to protect fundamental rights. How can the EU Commission and its newly established AI Office ensure harmonised enforcement across these various frameworks while effectively protecting individuals' rights and promoting innovation in the AI sector? To address these complex issues, this panel will delve into the role of the AI Office, examining how it interacts with other enforcement mechanisms within the framework of adjacent regulations such as the GDPR, DSA, and DMA. By exploring these dynamics, the discussion aims to shed light on the challenges and opportunities presented by regulatory enforcement in the AI domain. Questions to be answered: - Can centralized enforcement for GPAI reduce legal fragmentation and increase legal certainty at the EU level? - Will simplified compliance for GPAI models result in decreased protection of fundamental rights? - How do the stated goal of promoting innovation by the EU Commission impact future enforcement by the AI Office of GPAI? - How can the Advisory Forum and the Scientific Panel of Independent Experts at the AI Office serve as tools for enhanced regulatory cooperation? Organised by ALTEP DP with Rocco Saverino (moderator), Pawel Hajduk, Cláudio Teixeira, Sophie Stalla-Bourdillon

Over-enforcement or Under-protection: Can the AI Office Strike a Balance in the Enforcement of General Purpose AI?

Organised by ALTEP DP with Rocco Saverino (moderator), Pawel Hajduk, @claudio-teixeira.bsky.social, Sophie Stalla-Bourdillon

More information: cpdp.be/4157

#CPDP.ai #CPDP2025 #CPDP

Reclaiming Personhood in the Age of Disruption: In a world increasingly shaped by data-driven and AI-mediated practices, the preservation of individual dignity and civic well-being takes a backseat to algorithmic efficiency and commercial interest. This panel will examine the complex challenges of embedding and enforcing fundamental protections—by design and by default—within online service architectures that impact billions daily. From Online Behavioural Advertising (OBA) to pervasive personalisation and algorithmic sorting and scoring systems, there is an urgent need to clarify boundaries and explore alternative service designs to ensure technology serves the people behind the screens, not the other way around. In recent case law, the CJEU appears to draw inspiration from service design principles that advocate for the separation of two layers—primary services and personalized services— to better preserve individual autonomy and agency. This panel will examine what further steps are needed to make service design truly human-centric.

"Reclaiming Personhood in the Age of Disruption"

Organised by @brusselsprivacyhub.bsky.social with
@sophiestalla-b.bsky.social (moderator), Romain Robert, Lex Zard, Margaux Schaeffer, & Andrea Baldrati

More information: cpdp.be/1709

#CPDP2025 #TheWorldisWatching #CPDP.ai

With the passing of the Digital Services Act (DSA) and Digital Markets Act (DMA), and a potential Digital Fairness Act (DFA) being discussed by political actors in the new mandate of the European Commission, the EU's legislative and enforcement agenda on online advertising now stands at a cross-roads. This panel will look into the impact of: (1) industry-led initiatives such as Apple's ATT or Meta's pay or consent initiative; (2) the increased use of AI for targeting; (3) the new online ads transparency provisions of the DMA and the DSA and (4) outcomes of new relevant court cases such as the DOJ Google Search trial, on the online advertising market. Can we identify potential regulatory gaps or does Europe have all the tools it needs to properly regulate this market?

"The EU's Next Move on Online Advertising"

Organised by @awo.agency with @lexzard.bsky.social (moderator), @nickbotton.bsky.social , Denis Sparas, @hkingaby.bsky.social, Nataliia Bielova

More information: cpdp.be/1908

#CPDP2025 #theworldiswatching #CPDP.ai