9:00 am –
9:30 am CET

REGISTRATION

Check-In, Welcome Coffee & Light Bites

9:30 am –
9:35 am CET

WELCOME REMARKS

CO-HOSTS

• Dr. Gabriela Zanfir-Fortuna, VP for Global Privacy, Future of Privacy Forum
• Prof. Sophie Stalla-Bourdillon, co-Director, Brussels Privacy Hub

9:35 am –
10:00 am CET

OPENING KEYNOTE

Followed by Fireside Chat with Dr. Gabriela Zanfir-Fortuna

KEYNOTE SPEAKER:

Ana Gallego, Director General, DG JUST, European Commission

MODERATOR:

Dr. Gabriela Zanfir-Fortuna, VP for Global Privacy, Future of Privacy Forum

10:00 am –
10:45 am CET

PANEL I – A Data Protection (R)evolution?

As the impact of the competitiveness and simplification agenda of the European Commission continues to reverberate across Brussels, the EU, and beyond, a timely exchange on the role and evolution of data protection law is necessary. While acting as the cornerstone of the EU Digital Rulebook, the GDPR is part of a broader framework of digital laws which, over time, have emerged as being at odds with Europe’s landmark data protection rules. The specific challenges posed by AI systems and services entering the EU market, as well as the broader promise of innovation, are arguably the primary drivers of increasing momentum to “re-open” the GDPR. WIth this in mind, expert panelists will address:

• Stock-taking: What is the role of the GDPR and data protection law in the EU Digital Rulebook?
• With overarching digital regulatory “simplification” in mind, how do we foresee data protection law evolving to meet the challenges posed by AI systems?
• What lessons can be learned from other jurisdictions in the ways they have approached balancing rights protection with economic growth?
• Do the current rules allow SMEs and SMCs to flourish and, if not, what do they need from the data protection (r)evolution?

MODERATOR:

• Bianca-Ioana Marcu, Managing Director for Europe, Future of Privacy Forum

PANELISTS:

• Itxaso Domínguez de Olazábal, Policy Advisor, EDRi
• Olivier Micol, Head of the Data Protection Unit, DG JUST, European Commission
• Stephan Geering, Deputy General Counsel & Compliance, Trustworthy AI and Global Privacy Officer, Anthology
• Panelist: To be announced

10:45 am –
11:15 am CET

COFFEE BREAK

11:15 am –
11:30 am CET

LIGHTNING TALK #1 – Are LLM-based Systems Pushing Rights to the Breaking Point and Can We Govern Them?

LLM-based systems are evolving into connected and autonomous technologies, introducing new risks and amplifying known ones. From data leakage to unnoticed manipulation, these risks can emerge at both the model and system levels, often beyond what testing alone can detect. This talk outlines why an iterative lifecycle risk management process matters, and where its limits lie in preventing systemic harm.

Isabel Barberá, Dutch Coordinating Supervisor on AI and Algorithms (DCA), Dutch DPA

11:30 am –
12:15 pm CET

PANEL II – Between a Rock (AI Act) and a Hard Place (GDPR)?

The points of tension and overlap between the AI Act and GDPR have been central to the digital regulatory simplification discussion. Untangling the weeds at the intersection between the two laws remains crucial for understanding pathways towards convergence and harmonisation. On the one hand remains the question of which GDPR legal basis is most appropriate for the training of AI systems, and on the other hand the use of sensitive data for bias detection and correction (Article 10(5) AI Act) in AI systems seems at odds with Article 9 GDPR. In this context, the conversation from Panel I will be deepened in this Panel II with key questions including:

• What have we learned from the guidance of Data Protection Authorities on the application of the GDPR to the development and deployment of AI systems? 
• What are the key elements of emerging practice(s) for training AI systems, including GPAI models, in ways that comply with the GDPR and respect its principles? 
• To what extent is it possible to rely on technical and policy tools, including anonymisation, to resolve legal tensions between the GDPR and AI Act?

MODERATOR:

• Prof. Sophie Stalla-Bourdillon, Co-Director, Brussels Privacy Hub

PANELISTS:

• Lorelien Hoet, Director EU Government Affairs, Microsoft
• Prof. Theodore Christakis, Professor of International, European and Digital Law, Université Grenoble Alpes
• Laura Lázaro Cabrera, Counsel and Director of the Equity and Data Programme, Center for Democracy and Technology (CDT) Europe
• Rafaela Nicolazzi, Data, Privacy & Consumer Protection Lead, Europe – Global Affairs, OpenAI

12:15 pm –
1:15 pm CET

LUNCH BREAK

Sponsored by Prosus

1:15 pm –
2:15 pm CET

BREAKOUT WORKSHOPS – HAVE YOUR SAY!

TOPIC 1– The Right to an Explanation: from the GDPR to the AI Act 

TOPIC 2 -From Theory to Practice: How would you change the GDPR?

TOPIC 3 – Agentic AI under the GDPR and the EU AI Act 

TOPIC 1 FACILITATOR:

• Prof. Gianclaudio Malgieri, Honorary Director, Leiden University & Brussels Privacy Hub

TOPIC 2 FACILITATORS:

• Bárbara Lazarotto, Marie-Sklodowska Curie Action’s Fellow, Vrije Universiteit Brussel (VUB)
• Pablo Trigo Kramcsák, PhD Researcher, Vrije Universiteit Brussel (VUB)

TOPIC 3 FACILITATORS: 

• Vincenzo Tiani, EU Senior Counsel, Future of Privacy Forum
• Monika Tomczak-Gorlikowska, Global Head of Privacy, Digital & AI Governance, Prosus Group

2:15 pm –
2:30 pm CET

REPORTING BACK FROM WORKSHOPS

Join us back in plenary as we share key learnings and take-aways from the Breakout Workshops.

Workshop Facilitators

2:30 pm –
2:50 pm CET

HONORED GUEST SPEAKER TALK

Prof. Norman Sadeh, Carnegie Mellon University

2:50 pm –
3:20 pm CET

COFFEE BREAK

3:20 pm –
3:35 pm CET

LIGHTNING TALK #2 – Investigating automated decision making:

When does a decision supported by an algorithmic system become a fully automated decision? How should we evaluate meaningful human intervention? This talk outlines the grey area around automated decision making, how automated decision making can be recognised and how meaningful human intervention can be evaluated in practice, using empirical methods.

Ylja Remmits, Head of Projects, Algorithm Audit

3:35 pm –
4:20 pm CET

PANEL III – Data Protection Authorities in the Spotlight: Pathways for Harmonisation

Over the last two years in particular, Data Protection Authorities (DPAs) across the EU have emerged as some of the most vocal regulators on the application of data protection law to AI systems. As many published specific guidance on the interplay between the GDPR and AI Act, others have focused on enforcing the GDPR in AI contexts. While the AI enforcement landscape is very much still developing, it is already possible to map some of the most prominent issues identified by DPAs. With the overarching question of digital regulatory simplification in mind, this all-DPAs panel will address provocative questions and share ideas for pathways towards harmonisation and cooperation. Questions include:

• Is data protection law the “real” AI regulator? If so, what are the implications for the AI Act? 
• What have we learned from DPAs’ AI guidance and enforcement of the GDPR in AI contexts so far?
• Is there a case to be made for better harmonisation across the EU data protection landscape, and is this a question that can be solved by reopening the GDPR?

MODERATOR:

• Dr. Gabriela Zanfir-Fortuna, VP for Global Privacy, Future of Privacy Forum

PANELISTS:

• Sarah Artola, Juriste, CNIL
• Guido Scorza, Member of the Board, Italian Data Protection Authority (Garante)
• Sven Stevenson, Director Coordination Supervision on Algorithms (DCA), Dutch DPA
• Paul McDonagh-Forde, Brussels Attaché, Data Protection Commission of Ireland

4:20 pm –
4:40 pm CET

“IN DIALOGUE”

Continuing the “In Dialogue” series, with Supervisor Wojciech Wiewiórowski and Prof. Gianclaudio Malgieri.

SPEAKERS:

• Prof. Gianclaudio Malgieri, Leiden University
• Wojciech Wiewiórowski, European Data Protection Supervisor

4:40 pm –
4:45 pm CET

CLOSING REMARKS

Thank you from the Organisers.

CO-HOSTS

• Bianca-Ioana Marcu, Managing Director, Future of Privacy Forum
• Prof. Gianclaudio Malgieri, Honorary Director, Brussels Privacy Hub

4:45 pm –
6:00 pm CET

BITES & COCKTAIL RECEPTION

We invite you to close the 9th edition of the Brussels Privacy Symposium with us, and join us for cocktails.