Events

07/07/2017

Data Protection & Security Conference 2017

Events

London
London – details to be confirmed

Data Protection & Security Conference 2017 – 7th July 2017

Introduction

This conference, chaired by Robert Bond, examines a wide range of current and future developments in this highly complex and often technical area of work. Topics covered will range from the proposed powers of regulators and likely penalties under a new ePrivacy regime to data security.

Conference Agenda

This Conference will cover the following topics:

9.30am – 10.15am: Privacy & Electronic Communications
Rosemary Jay, Hunton & Williams

The current ePrivacy Directive which covers privacy and electronic communications is under review by the European Commission to bring it into line with the new General Data Protection Regulation.  The preliminary indications are that it will be replaced by a directly applicable regulation and impose more stringent requirements than the current law.

This session will cover:

• An explanation of the relationship between the ePrivacy rules and the general rules on data protection
• An explanation of the issues which have been considered problematic including the problems caused by the convergence of services
• An outline of the Commission’s proposal and assessment of its impact
• The proposed powers of regulators and likely penalties under the new regime.

10.15am – 11.00am: Data Security & Exposure
Dr Stephen Hill

The rapid pace of technological change and globalisation have profoundly transformed the scale and way personal data is collected, accessed, used and transferred. Social networks, data sharing websites, cloud computing and new portable devices including tablets and smart phones pose new challenges for our data security and governance culture.

• How is the digital environment challenging data security?
• Current state of data theft in the UK
• Lessons learnt – a post-mortem of the high profile breaches
• Key IT and people risks to data exposure
• The dark markets and criminal use of stolen data

11.15am – 12.00: GDPR & Technology: Friends or Foes?
Robert Bond, Bristows

The GDPR was introduced, in part, to address the fact that Europe’s existing data protection regime pre-dated technologies such as cloud computing, social networking, apps and big data. Even the world-wide web was only in its infancy when the existing regime was introduced. In this session, the impact of the GDPR on these and other technologies will be addressed.

Have the authors of the GDPR done a good job when it comes to regulating the processing of personal data in the super-connected world in which we live or not? And what does the GDPR mean for:

• Artificial intelligence?
• Big data & analytics?
• The Internet of Things?
• Cloud & Apps?
• How can the benefits of these technologies be realised without an unacceptable level of risk?

12.00 – 12.45pm: Biometrics and Data Protection
Rosemary Jay, Hunton & Williams

Biometrics are being hailed as the new frontier of technology, bringing together the speed and certainty of personally identifiable information and new technologies.  However there are also big questions about the effects of these technologies and whether the data protection regime, even as amended by the GDPR, is sufficient to safeguard against the inherent risks.

This session will cover:

• An explanation of the types of emerging technologies in the field of biometrics
• An analysis of the impact of the GDPR on this emerging field
• A view of the risks and safeguards which are associated with the new biometrics and
• An assessment of the penalties for those who misuse this type of data.

12.45 – 1.00pm: Questions on Morning Session

2.00pm – 2.50pm: Surveillance and Corporate Intelligence
Lorna Skinner, Matrix Chambers

In What Price Privacy? and What Price Privacy Now? The Information Commissioner exposed the lucrative illegal trade in personal information. This session will cover:

• Overview of the framework of the DPA
• Criminal liability under s55
• Civil liability for breach of statutory duty under s4(4)
• Admissibility of illegally obtained evidence in civil proceedings
• Implications for monitoring staff at work, monitoring third parties and obtaining information
• Applicable codes of practice

2.50pm – 3.40pm: Data Protection in Employment Disputes: Current and Future
Simon Cheetham and Lance Harris, Old Square Chambers

This session provides an update on the current and future developments in law and practice in the context of employment disputes. Amongst the topics to be covered are:

• An outline of the legal framework as it affects employment disputes
• The GDPR
• The pros and cons of using the DPA in workplace disputes
• Subject Access Requests – request and refusals
• The role of the ICO
• Google v Vidal Hall
• Litigation tactics

3.55pm – 4.45pm: The Expense of Compliance
Rory Dunlop, 39 Essex Street

As more and more people exercise their right to request data under the Data Protection Act and other legislation, the costs of complying continues to grow.  Requesters and data controllers need to know when a request can be refused on the grounds that it would be disproportionately expensive to comply with it.

This session will cover:

• The discretion under section 7(9) of the DPA and Dawson-Damer v Taylor Wessing
• Sections 13 and 14 of FOIA
• Reg 12(4)(b) of the EIR
• What costs may be taken into account under s. 13 of FOIA?
• When costs make a request ‘vexatious’ and/or ‘manifestly unreasonable’

4.45pm – Close
Questions & Answers

If you would like to book a place for this event, please follow this link: Data Protection & Security Conference 2017 .

YesNo