2025 is emerging as a landmark year for data protection law. Organisations must comply or prepare to comply with an assortment of new digital and cyber laws, including the Data Act, which will apply from September 2025. 

The EU AI Act came into force on August 1, 2024, and the clock is ticking as the prohibitions will apply from February 2, 2025 threatening significant fines for those breaching the regulations.

Join us for our 12th Annual European Data Protection and AI Conference to understand the impacts of the rapidly evolving global privacy, data protection and cybersecurity regulatory and litigation environment, and to protect your business from data protection risk.

Register

Abstract background with the movement of luminous particles

Conference details

The conference will take place in:

Frankfurt  Monday, September 30, 2024  11:00 – 14:30 CEST
Amsterdam Tuesday, October 1, 2024 09:00 – 12:30 CEST
Paris Wednesday, October 2, 2024 09:00 – 12:30 CEST
London Thursday, October 3, 2024 09:00 – 12:30 BST
 

Programme:

Registration

Frankfurt: 11:00 – 11:30 | Amsterdam, Paris, London: 09:00 – 09:30

Managing data law risks in 2025

Frankfurt: 11:30 – 13:00 | Amsterdam, Paris, London: 09:30 – 11:00

As the GDPR approaches its seventh birthday, a clearer picture of data protection risk is emerging. A spate of Case Law from the Court of Justice of the European Union has clarified fundamental questions on litigation risk, the risk of fines, and broader questions on scope and compliance. Enforcement action and guidance has also highlighted key regulatory priorities, including AI and automated decision-making, online trackers, and the right of access.

Alongside this, organisations must also comply or prepare to comply with an assortment of new digital and cyber laws, including the Data Act, which will apply from September 2025. Meanwhile, the UK has shifted away from fines in its enforcement action, focusing on providing guidance for organisations on AI and other key areas. 2025 will also be the year the Commission reviews the UK’s GDPR adequacy status. This session will draw out the key themes from EU/UK case law, enforcement, guidance, and legislation in Q4 2023 and in 2024 to give you a clear picture of the data law risks to prioritise in 2025.

Break
Frankfurt: 13:00 – 13:15 | Amsterdam, Paris, London: 11:00 – 11:15
The EU AI Act has arrived – how should you govern your use of AI?

Frankfurt: 13:15 – 14:30 | Amsterdam, Paris, London: 11:15 – 12:30

The EU AI Act will apply from February 2025. The AI Act sets out a framework of obligations which represent best practice to govern the use of AI systems.

In this session we will look at the practicalities in building governance processes that can flex to the high risk AI Act use case standards whilst also working with lesser levels of rigour for lower risk use cases, including the role of standards and AI assessment platforms.

Lunch and networking

Frankfurt: 14:30 | Amsterdam, Paris, London: 12:30

Please note, capacity at these events is limited and places will be offered on a first-come first-served basis. A waitlist will be in place in the event of oversubscribed events. 

Contacts

Head of Information Governance, Privacy and Cybersecurity, EMEA
Partner, Co-Head of Cybersecurity
Partner
Partner
Partner