KEYNOTE ADDRESS:

MB Donnelly

Deputy Commissioner,

Data Protection Commission

Conference Chair

Paul Lavery

Partner,

McCann FitzGerald

Transparency Notices and the Whatsapp Decision - Back to the Future?

Doug McMahon - Partner, McCann FitzGerald

When the Data Protection Commission fined WhatsApp for failure to comply with its transparency obligations, we were provided with an insight into how supervisory authorities expect controllers to approach their data protection notices.  In many ways it highlighted the importance of following the Article 29 Working Party transparency guidelines that were issued in the run up to the GDPR coming into force, which had generally been regarded by controllers as unwieldy and commercially impractical. This talk examines the implications of the decision and provides practical tips for updating notices.

Monitoring Employee Health Data: the Limits, Safeguards and Lessons from Covid-19

Morgane Conaty BL - Barrister

Can an employer ever monitor their employee’s health data? That question remains pertinent for employers bringing their workforce back in person following the easing of restrictions and as they consider what measures can be taken to mitigate any spread of Covid-19 amongst employees and to keep employees safe. This talk considers the circumstances in which employee health data, as special category personal data, can lawfully be processed by employers, the limits, safeguards and data protection principles that need to be followed and examines specific examples such as monitoring vaccination data and requiring notification of a positive test.

Children Front and Centre

Gordon Wade - Data Protection Lead, Tiktok

That children merit specific protection when it comes to the processing of their personal data is clear not only from the text of the GDPR but also from the comprehensive recent guidance published by the Irish DPC, the UK ICO and the French CNIL. With the spotlight on children's compliance, this session provides practical guidance on common themes that run through legislative developments in this area, using case study examples from TikTok’s experience to illustrate compliance approaches.

The Ever Widening Definition of Data Breach

Adam Finlay - Partner, McCann FitzGerald

Recent decisions of the DPC and EDPB have shed further light on data protection authorities’ interpretations of the concept of personal data breach and the associated obligations of organisations in dealing with personal data breaches. This session focuses on key takeaways from these decisions and provides delegates with practical guidance on managing personal data breaches.

Implementing Data Protection at the Research & Development Stage

Patricia Gonzalez Ulecia Blanco Soler - Privacy Counsel, Logitech

When working with innovators and engineers in Research and Development (R&D) teams, how can we ensure that data protection is embedded not only in the proposed product/service, but also in the mindset of those creating it? This session provides practical tips on what works for each step - from concept creation, market research and user testing to final launch - using real-life examples.

Privacy as CSR: Doing Privacy Right, Not Just Doing Privacy Rights

Dr Valerie Lyons - BH Consulting

Although privacy and data protection requirements have been well absorbed into current governance frameworks, the ethical and social dimension of privacy is often absent, with little emphasis on engaging with more sustainable values such as consumer trust. This has given rise to the birth of 'Privacy as a Corporate Social Responsibility (CSR)’. This talk provides delegates with key insights into how to incorporate Privacy as CSR into an organisation's privacy strategy, and the advantages for the organisation in doing so.

Preparing for and Navigating Statutory Inquiries - Practical Tips and Guidance

Amy Brick - Senior Associate, McCann FitzGerald

With data protection enforcement on the increase and the GDPR providing for potentially onerous penalties, managing regulatory engagement is now more important for organisations than ever. This talk will provide an overview of the DPC’s statutory inquiry and investigations process and practical tips for preparing for and navigating these processes.