Summer Academy For Global Privacy Law 2025

The Data Reg Stack: Decoding the Digital Rulebook in a Disruptive Tech Era

About the Academy

16-20 June 2025

Registrations are open Here

Apply to the Global Privacy Summer Academy – Emerging Voices Scholarship here

 

Subjects covered will include:

  • General Data Protection Regulation (GDPR) and its Impact on AI

  • Digital Services Act (DSA) and Digital Markets Act (DMA)

  • AI Act and Algorithmic Decision-Making

  • Data Sharing and IoT Products (Data Act)

  • Regulatory Enforcement and Legal Basis for AI Training

The Brussels Privacy Hub is proud to announce its 2025 Summer Academy for Global Privacy Law, after 9 years of successful editions.

Summer Academy Organisers:
Professor Sophie Stalla-Bourdillon, Scientific Coordinator and Co-Director Brussels Privacy Hub

Barbara da Rosa Lazarotto, Managing Coordinator

Professor Gianclaudio Malgieri, Co-Director Brussels Privacy Hub

The Brussels Privacy Hub would like to acknowledge the collaboration and assistance of the following organisations:

The Faculty

Aleksandra Kuczerawy

Professor at KU Leuven’s Centre for IT & IP Law

Andres Algaba

Postdoctoral Researcher and Guest Professor at VUB

Urs Buscke

Senior Legal Officer at BEUC

Gianclaudio Malgieri

Associate Professor of Law at Leiden University and Co-Director of the Brussels Privacy Hub

Boryana Hristova-Ilieva

Team Leader – NIS Team
European Commission, DG Communications Networks, Content and Technology, Cybersecurity and Digital Privacy

Barbara Lazarotto

PhD Researcher at Vrije Universiteit Brussel

Claudio Teixeira

Senior Legal Officer at BEUC

Sophie Stalla-Bourdillon

Co-Director of the Brussels Privacy Hub at Vrije Universiteit Brussel

Desara Dushi

EU Policy Counsel at Future of Privacy Foru

Estelle Massé

Policy Officer, International Affairs and Data Flows
DG Justice, European Commission

Michaël Van den Poel

Research engineer, EDHEC; PhD Student, VUB and BPH Member

Giuseppe Bianco

OECD

Heidi Waem

Partner at DLA Piper

Nikolaos Theodorakis

Partner at Wilson Sonsini Goodrich & Rosati

Pablo Trigo Kramcsák

PhD researcher at VUB and BPH Member

Hielke Hijmans

Chairman of the Litigation Chamber
Belgian Data Protection Authority

Henry Pearce

Senior Lecturer in Law at University of Portsmouth

Vincenzo Tiani

PhD Researcher at VUB and BPH Member 

Janine Patricia Santos

Policy Advisor at EDRi

Lucas Anjos

Sciences Po

Muhammed Demircan

Lawyer at DLA Piper

Natascha Gerlach

Director of Privacy & Data Policy at CIPL

Paul Quinn

Professor at Vrije Universiteit Brussel

Rowin Jansen

PhD Candidate at Radboud Universiteit

Sebastijan Čutura

Senior Manager, Industry Cybersecurity at ECSO

Simon Verschaeve

DLA Piper

Stéphan André

Legal Officer at Centre for Cybersecurity Belgium

Thibault Helleputte

CEO of DNAlytics

Eyup Kun

PhD Researcher at KU Leuven Center for IT and IP Law

Tommaso Fia

Postdoctoral Researcher at University of Tübingen

Wenlong Li

Lecturer in Law at Aston University

Leanda Barrington-Leach

Executive Director at 5Rights Foundation

Kai Zenner

Head of Office and Digital Policy Adviser for MEP Axel Voss at European Parliament

Maciej Skonieczka

Data Protection Manager at Proximus

The Programme

The Brussels Privacy Hub Summer Academy for Global Privacy Law 2025 will explore the theme “The Data Reg Stack: Decoding the Digital Rulebook in a Disruptive Tech Era.” Each day of the Academy will unpack a different layer of the EU’s evolving regulatory framework, from the GDPR to the AI Act, Digital Services Act, and beyond. Participants will gain a structured understanding of the EU Data Reg Stack through keynote sessions, expert lectures, and interactive workshops that enable practical application of key concepts. In addition to the core academic programme, the Academy offers vibrant networking opportunities and side events with fellow researchers, regulators, and civil society actors.

All participants will receive a certificate of completion.
Members of the International Association of Privacy Professionals (IAPP) are eligible to obtain Continuing Privacy Education (CPE) credits for attending the Academy. Check the IAPP website for instructions.

Practical Information

When?

The Summer Academy will take place from 16-20 June 2025.

Where?

The participation at the Summer Academy will take place in-person only. Participants will be welcomed in the U-Residence, located at the VUB Main Campus in Brussels. More information on how to reach the venue and a campus map (look for building U) are available on the VUB website.

Language?

English

For whom?

The Summer Academy is aimed at legal practitioners, data protection professionals – including compliance officers, data protection officers, chief privacy officers – civil society representatives and activists, early-career researchers, and all those working in the privacy, data protection and data governance space, at the interface between law and technology. 

Prerequisite for participating in the Summer Academy: Familiarity with EU data protection law. 

How to register?

Registration are open via this website.

Registration Fees and Payment Policy

The registration fee includes course participation and seminar materials.

EARLY BIRD: Up to 30 April, registration can enjoy an early bird discount.

€1400 Regular

€1300 Former BPH Summer Academy Attendees and Consumer Leadership Academy attendees

€1300 European Institutions Workers

€800 Reduced PhD Student Fee (subject to verification of PhD student status)

Regular Prices: From May 1st, full prices apply.

€1800 Regular

€1400 Former BPH Summer Academy Attendees and Consumer Leadership Academy attendees

€1400 European Institutions Workers

€900 Reduced PhD Student Fee (subject to verification of PhD student status)

Registrations close on the 25th of May, 2025.

 

Cancellation Policy
Refunds of 50% of the payment amount are possible in case of cancellation. Cancellation shall be done in writing, and should be received before 31 March 2024 for early bird registrations, or 30 April for full price registrations.
Privacy Notice

Date: 16 February 2023 – Updated 19 January 2024

 

This Privacy Notice describes how we collect and use your personal data in the context of the Brussels Privacy Hub Summer Academy programme.

 

Identity of the controller

The Vrije Universiteit Brussel is responsible for the processing of your personal data as described in this Privacy Notice. You can reach us at brusselsprivacyhub@vub.be.

 

The information we collect and process

We collect the following information:

  • Your name
  • Your contact details
  • Your participant category (student or professional)
  • Your affiliation
  • Your biography and motivation letter
  • Your IP-address
  • Your dietary preference

 

How we collect your information

We collect the information you submit in the registration form and the information you submit to us via mail or social media.

Why do we collect your information

We collect your information to provide services in relation to our Summer Academy for Global Privacy Law (article 6(1)(b) GDPR).

  • Your name and contact details are collected to enable communication and provide personalized items such as name tags during the event.
  • Your participant category is collected to invoice according to the differentiated participation fees.
  • Your affiliation is collected to better adapt the content of the Summer Academy to the different participants.
  • Your dietary preference is collected to be able to offer lunch in accordance with the participants wishes during the Summer Academy.
  • Your biography and motivation letter is collected to be able to select participants.

We may also use personal data in other ways for which we provide specific notice at the time of collection.

 

Whether we share or disclose your information

We may disclose personal data to our processors or authorize them to process the data to pursue one or more of these purposes. Our processors include:

Jotform

Microsoft

 

Retention and deletion of your information

The data will be stored for the period of organization and activity of the Summer Academy and for a maximum of 6 months. After this period, all personal data related to your participation will be deleted.

 

Your rights

You have the right to:

– To access your personal data and obtain all the information on the processing as mentioned in Article 15 Regulation 679/2016, hereinafter GDPR, (origin, purpose, lawful grounds, details about the data controller, recipients, duration, other data subjects’ rights, etc.).
– You also have the right to rectify your personal data, update, delete or request limitation of processing. The content and exercise of these rights is regulated by Articles 15-18 of the GDPR. Finally, the data subject has the right to revoke the consent for the processing of his/her personal data. The revocation of consent does not affect the lawfulness of the processing based on the consent given before the revocation.
– You have the right to lodge a complaint with the Data Protection Supervisor if he or she believes that the processing of his or her personal data is in breach of the GDPR, pursuant to and in accordance with Article 77 of that Regulation.

To exercise your data subject rights, please contact us at brusselsprivacyhub@vub.be. In addition, you can also reach the Data Protection Officer of the Vrije Universiteit Brussel at DPO@vub.be.

How to contact us

You can submit a request or ask us questions about this Privacy Notice or our practices by emailing us at brusselsprivacyhub@vub.be, emailing our DPO at DPO@vub.be or writing us at:

Brussels Privacy Hub

Pleinlaan 2, 1050 Elsene

Belgium

 

Updates to our privacy notice

We may update this Privacy Notice from time to time and without prior notice to you to reflect changes in our personal data practices. We will indicate at the top of the policy when it was most recently updated.

 

 

Transgressive Behaviour Policy

All people involved in the Summer Academy treat each other with respect, taking each other’s physical and psychological integrity into consideration. They do not intentionally do or say anything which another person could find offensive and regard as a violation of dignity. People address each other with the terms of reference which they themselves prefer.

Any form of unacceptable behaviour – bullying, verbal and physical violence, racism and sexually unacceptable behaviour – and discrimination or neglect on the basis of gender, wealth, civil status, political conviction, trade union allegiance, language, socio-economic situation, class, outlook on life, religion, nationality, skin colour, ethnicity and migration background, age, sexual orientation, gender identity and expression, physical and mental capacities and limitations will not be tolerated, including coercion via peer pressure. This applies to direct communication via words, images, actions, behaviours, and to online communication. 

Participants are mutually supportive. Participants that witness discrimination, neglect or unacceptable behaviour do not look away, but try to stop it. They provide support to the victim. If they are unable to stop this undesirable behaviour or do not dare to stop it, then we ask them to report this behaviour, possibly as (anonymous) witnesses to an executive member of the Brussels Privacy Hub.

The full list of executive members can be found on the Brussels Privacy Hub website. Alternatively, you can reach us at BPHSummerAcademy@vub.be.

Participants respect the applicable VUB and external regulations.

In case of emergency, VUB security is reachable via bewaking@vub.be, or via telephone at +32 2 629 11 11 (emergency) or +32 2 629 21 76 (general).

Previous Summer schools – Academies

9th Summer Academy For Global Privacy Law 2024 The Future of Data Protection : Navigating Between Data Regulations, Data Spaces and Data Dogmas (1-5 July 2024)
8th Summer Academy for Global Privacy Law: From Data Access to Data Transformations: How to Govern Data in the Age of Analytics and AI (19-23 June 2023)
7th Summer Academy for Global Privacy Law: Engineering The Data Regulation(S) In An Age Of Reform (27 June – 1 July 2022)
6th Summer Academy for Global Privacy Law: International data flows: Moving challenges, new solutions (21-25 June 2021)
5th Summer Academy for Global Privacy Law: Confronting the new Challenges (22-26 June 2020)
4th European Data Protection Law Summer School: Advancing (with) EU data protection (24-28 June 2019)
3rd European Data Protection Law Summer School: Putting the GDPR into practice and in context (24-28 June 2018)
2nd European Data Protection Law Summer School: The GDPR is Now (26-30 June 2017)
1st European Data Protection Law Summer School: Getting to grips with the GDPR (4-8 July 2016)