Concerned about the impact of remote work on productivity, some organizations are monitoring their staff as they work from home—sometimes to a greater extent than they were in the office.

What are the legal considerations when tracking employees’ browsing and working habits in their own home? Is such activity even legal under data protection laws like the GDPR? And could any productivity gains justify the intrusion on people’s privacy?

Host

• Selin Ozbek Cittone, Managing Partner, Ozbeck Attorney Partnership

Speakers

• Katie Hewson, Partner, Stephenson Harwood
• Olumide Babalola, Esq., MCIArb (UK), Managing Partner, Olumide Babalola LP
• Katie Tomashevski, Data Protection and Information Officer, Unison
• Rowenna Fielding, Supreme Nerd at Miss IG Geek Ltd.

COVID-19 brought panic, uncertainty, and a shift towards remote work: the perfect storm for a huge wave of phishing and other social engineering attacks.

As rates of coronavirus begin to ease off in some parts of the world, scammers will need to find new ways to persuade employees to click a phishing link or download a malicious payload.

Our panel will discuss the lessons on phishing since early 2020: What tactics work best to mitigate phishing? What motivates social engineering scammers? How can organizations move toward a more secure post-pandemic workplace?

Host

Joe Tidy, BBC Cybersecurity Correspondent

Speaker

• Dr. Cédric Krummes, Information Governance Officer, High Speed Two (HS2) Ltd.
• Zuzana Bitter, Head of Regional Strategic Alliances (United Kingdom), Cyber Security Forum Initiative (CSFI)
• Vickie Guilloit, Partner, Privacy Culture
• Jonathan Armstrong, Technology Lawyer, Cordery

2021 began full of anticipation for the release of two key documents: the European Commission's finalized standard contractual clauses, and the European Data Protection Board's finalized guidance on supplementary measures.

Since their arrival, organizations have been working hard to operationalize them, but challenges remain regarding the particular assessments of third countries that must be undertaken as well as understanding the risk and impact of all transfers at large.

In this session, we share a step-by-step guide to undertaking a Transfer Impact Assessment (TIA), the considerations when conducting Third Country Assessments (TCA), and the relevant measures that can be put in place to mitigate risk and ensure regulatory compliance.Understand the operational impact for organizations. Outline the necessity and considerations of the assessment of third countries. Breakdown the steps data importers and exporters can take to protect and enable transfers

Speaker

• Matteo Quartieri, CIPP/E, CIPM, Privacy Associate, OneTrust

Early in the pandemic, contact-tracing apps were seen as a key way to fight COVID-19.

Some countries, like Singapore and China, developed invasive apps to track people’s movements and behavior. Governments in Europe and the Americas mainly relied on the less intrusive Apple/Google Bluetooth framework.

More than a year into the use of such apps—which, if any, work best? How far should we be willing to sacrifice privacy and autonomy in the name of public health? And how long should contact-tracing apps remain a feature of society as we emerge from the pandemic?

Host

• Vickie Guilloit, Partner, Privacy Culture

Speakers

• Adrian Leung, Data Protection Officer, Equifax
• Professor Eerke Boiten, Professor in Cyber Security and Director of Cyber Technology Institute

Evidence increasingly confirms that COVID-19 vaccines are effective. But a substantial portion of society continues to be hesitant about getting their shots.

Vaccine passports could be a way to mitigate the impacts of COVID-19 and help contain the spread of the disease. But some are worried about denying access to travel or facilities to unvaccinated people.

Furthermore, vaccine passports have provoked privacy concerns. Should people be expected to share their health data with an increasingly broad range of actors—from border guards to nightclub security staff?

Our panel will discuss the ethical and social dimensions of vaccine passports: Could vaccine passports create a new social divide? Are we balancing privacy and freedom properly? And is there a secure and privacy-preserving solution to this problem?

Host

• Robert Bateman, Analyst and Research Director, GRC World Forums

Speakers

• Rob Masson, CEO, The DPO Centre
• Madeleine Stone, Legal and Policy Officer, Big Brother Watch
• Steve Wright, Partner, Privacy Culture (former DPO of john lewis, bank of england)

After leaving the EU, the UK retained the GDPR in its domestic law and earned its EU adequacy. But more recently, the government has suggested that the UK will diverge dramatically on data protection and privacy.

Along with appointing a new Information Commissioner, the UK plans to set up its own adequacy network to enable the liberal flow of personal data around the world. The government has also announced plans to eliminate cookie banners—plans that could have a significant impact on digital advertising.

But are these plans realistic? How could they be implemented? Is the UK putting its existing EU data flow arrangements at risk?

Our panel will explore how should businesses that trade in—or with—the UK should adapt to the data protection "new normal".

Host

• Tash Whitaker, Global Data Compliance Director and Consultant, Whitaker Solutions Ltd

Speakers

• Efrain Castaneda, CIPP/E, Privacy Counsel, OneTrust
• Steve Wilkinson, Independent Data Protection Advisor
• Stewart Room, President of the National Association of Data Protection Officers

The immense change and challenges brought about by 2020 and 2021—with increased data collection, new security threats, and a more privacy-conscious public—have brought many changes to privacy and data protection professionals.

PrivSec New Normal will bring together a panel of professionals to discuss how their roles have evolved since the start of the pandemic, and how they are meeting the challenges brought about by the new normal.

Host

• Robert Bateman, Analyst and Research Director, GRC World Forums

Speakers

• Merilyne Davies, Global Director of Privacy / Data Protection Officer, RX Global
• Steve Wright, Partner, Privacy Culture
• Benjamin Favaro, Senior Associate, Data & Privacy at Lewis Silkin LLP
• Debbie Evans, Group Data Protection Officer, Rentokil Initial

Confined to their homes, consumers have become more dependent than ever on their devices—and have spent more and more time being monitored and targeted by big tech firms.

But the public conversation on privacy has changed markedly over the past year and a half.

Apple’s pro-privacy marketing drive has captured the public imagination. WhatsApp’s data processing changes sparked widespread concern. And privacy-enhancing apps and products are increasingly mainstream.

What’s the direction of travel for consumer privacy? How should businesses respond? And can privacy-oriented companies thrive in this new environment?

Host

• Joe Tidy, BBC Cybersecurity Correspondent

Speakers

• Richard Ingle, MData Protection Officer, BLM
• Vickie Guilloit, Partner, Privacy Culture
• Matt Collinge, Data Protection Lead, RSA

Work from home, return to the office—or both?

Hybrid work environments, where employees are spread across remote and office-based workplaces, are becoming increasingly common as the lockdown/re-open cycle continues.

What are the main security considerations for hybrid work environment? How can organizations adapt their security regimes to protect employees and assets as they transition to hybrid work?

Host

• Joe Tidy, BBC Cybersecurity Correspondent

Speakers

• Federico Iaschi, Business Information Security Officer, Virgin Media O2
• Robert Fleming, CMO, Zivver

This panel will be an open, honest discussion between professionals who either (a) believe that the proposals announced by the Department for Digital.

Culture, Media and Sport will weaken our data protection and privacy rights, or (b) believe Brexit offers opportunities for divergence from EU law and that these will not unduly tip the balance too far in favour of data controllers.

Host

• Robert Bateman, Analyst and Research Director, GRC World Forums

Speakers

• Dr. Nathalie Moreno, Partner, Addleshaw Goddard
• Henry Davies PgC. CIPP/E, Deputy Data Protection Officer, Veolia UK & Ireland
• Yasmin Hinds, Global Privacy Lead & Legal Counsel, Pontoon Solutions