Description

PROGRAM (DAY 1)

8h30 – 9h00 Welcome and Coffee

9h00 – 10h30 Data Protection Impact Assessment (DPIA): recap

• What is a DPIA?
• When to conduct a DPIA?
• How to conduct a DPIA?
• Recommendations and guidance by supervisory authorities

10h30 – 10h50 Coffee Break

10h50 – 12h30 DPIA: best practices

• What are the best practices, tools?
• Defining risks to rights and freedoms
• Insights and techniques to successfully plan, conduct and validate a DPIA
• Introduction to the case study

12h30 – 13h30 Lunch

13h30-15h00 DPIA in practice, part I

• Conduct a DPIA: assessing risks to rights and freedoms
• DPIA documentation

15h00 – 15h20 Coffee Break

15h20 -17h00 DPIA in practice, part II

• Reviewing part I
• Example DPIA’s carried out by CRANIUM

PROGRAM (DAY 2)

8h30 – 9h00 Welcome and Coffee

9h00 – 10h30 International Transfers

• International data transfers: adequacy, SCC’s, BCR, derogations
• Recap Schrems II
• Current status: update on latest information on international transfers

10h30 – 10h50 Coffee Break

10h50 – 12h30 Transfer Impact Assessment

• What is a Transfer Impact Assessment?
• Review of examples

12h30 – 13h30 Lunch

13h30-15h00 Data Protection Authorities: Lessons Learned

• Selection of recent EU DPA decisions
  • What was the case about?
  • How to avoid it happening to you?

15h00 – 15h20 Coffee Break

15h20 -17h00 Pseudonymization & anonymization

• Pseudonymization & anonymization: definitions & examples
• Challenges & Techniques
• Your role as a DPO