Summer Academy For Global Privacy Law 2025
The Data Reg Stack: Decoding the Digital Rulebook in a Disruptive Tech Era
Subjects covered will include:
-
General Data Protection Regulation (GDPR) and its Impact on AI
-
Digital Services Act (DSA) and Digital Markets Act (DMA)
-
AI Act and Algorithmic Decision-Making
-
Data Sharing and IoT Products (Data Act)
-
Regulatory Enforcement and Legal Basis for AI Training
The Brussels Privacy Hub is proud to announce its 2025 Summer Academy for Global Privacy Law, after 9 years of successful editions.
Summer Academy Organisers:
Professor Sophie Stalla-Bourdillon, Scientific Coordinator and Co-Director Brussels Privacy Hub
Barbara da Rosa Lazarotto, Managing Coordinator
Professor Gianclaudio Malgieri, Co-Director Brussels Privacy Hub
The Brussels Privacy Hub would like to acknowledge the collaboration and assistance of the following organisations:
The Faculty
Boryana Hristova-Ilieva
The Programme
The Brussels Privacy Hub Summer Academy for Global Privacy Law 2025 will explore the theme “The Data Reg Stack: Decoding the Digital Rulebook in a Disruptive Tech Era.” Each day of the Academy will unpack a different layer of the EU’s evolving regulatory framework, from the GDPR to the AI Act, Digital Services Act, and beyond. Participants will gain a structured understanding of the EU Data Reg Stack through keynote sessions, expert lectures, and interactive workshops that enable practical application of key concepts. In addition to the core academic programme, the Academy offers vibrant networking opportunities and side events with fellow researchers, regulators, and civil society actors.
All participants will receive a certificate of completion.
Members of the International Association of Privacy Professionals (IAPP) are eligible to obtain Continuing Privacy Education (CPE) credits for attending the Academy. Check the IAPP website for instructions.
Practical Information
When?
The Summer Academy will take place from 16-20 June 2025.
Where?
The participation at the Summer Academy will take place in-person only. Participants will be welcomed in the U-Residence, located at the VUB Main Campus in Brussels. More information on how to reach the venue and a campus map (look for building U) are available on the VUB website.
Language?
English
For whom?
The Summer Academy is aimed at legal practitioners, data protection professionals – including compliance officers, data protection officers, chief privacy officers – civil society representatives and activists, early-career researchers, and all those working in the privacy, data protection and data governance space, at the interface between law and technology.
Prerequisite for participating in the Summer Academy: Familiarity with EU data protection law.
How to register?
Registration are open via this website.
Registration Fees and Payment Policy
The registration fee includes course participation and seminar materials.
EARLY BIRD: Up to 30 April, registration can enjoy an early bird discount.
€1400 Regular
€1300 Former BPH Summer Academy Attendees and Consumer Leadership Academy attendees
€1300 European Institutions Workers
€800 Reduced PhD Student Fee (subject to verification of PhD student status)
Regular Prices: From May 1st, full prices apply.
€1800 Regular
€1400 Former BPH Summer Academy Attendees and Consumer Leadership Academy attendees
€1400 European Institutions Workers
€900 Reduced PhD Student Fee (subject to verification of PhD student status)
Registrations close on the 25th of May, 2025.
Cancellation Policy
Privacy Notice
Date: 16 February 2023 – Updated 19 January 2024
This Privacy Notice describes how we collect and use your personal data in the context of the Brussels Privacy Hub Summer Academy programme.
Identity of the controller
The Vrije Universiteit Brussel is responsible for the processing of your personal data as described in this Privacy Notice. You can reach us at brusselsprivacyhub@vub.be.
The information we collect and process
We collect the following information:
- Your name
- Your contact details
- Your participant category (student or professional)
- Your affiliation
- Your biography and motivation letter
- Your IP-address
- Your dietary preference
How we collect your information
We collect the information you submit in the registration form and the information you submit to us via mail or social media.
Why do we collect your information
We collect your information to provide services in relation to our Summer Academy for Global Privacy Law (article 6(1)(b) GDPR).
- Your name and contact details are collected to enable communication and provide personalized items such as name tags during the event.
- Your participant category is collected to invoice according to the differentiated participation fees.
- Your affiliation is collected to better adapt the content of the Summer Academy to the different participants.
- Your dietary preference is collected to be able to offer lunch in accordance with the participants wishes during the Summer Academy.
- Your biography and motivation letter is collected to be able to select participants.
We may also use personal data in other ways for which we provide specific notice at the time of collection.
Whether we share or disclose your information
We may disclose personal data to our processors or authorize them to process the data to pursue one or more of these purposes. Our processors include:
Jotform
Microsoft
Retention and deletion of your information
The data will be stored for the period of organization and activity of the Summer Academy and for a maximum of 6 months. After this period, all personal data related to your participation will be deleted.
Your rights
You have the right to:
– To access your personal data and obtain all the information on the processing as mentioned in Article 15 Regulation 679/2016, hereinafter GDPR, (origin, purpose, lawful grounds, details about the data controller, recipients, duration, other data subjects’ rights, etc.).
– You also have the right to rectify your personal data, update, delete or request limitation of processing. The content and exercise of these rights is regulated by Articles 15-18 of the GDPR. Finally, the data subject has the right to revoke the consent for the processing of his/her personal data. The revocation of consent does not affect the lawfulness of the processing based on the consent given before the revocation.
– You have the right to lodge a complaint with the Data Protection Supervisor if he or she believes that the processing of his or her personal data is in breach of the GDPR, pursuant to and in accordance with Article 77 of that Regulation.
To exercise your data subject rights, please contact us at brusselsprivacyhub@vub.be. In addition, you can also reach the Data Protection Officer of the Vrije Universiteit Brussel at DPO@vub.be.
How to contact us
You can submit a request or ask us questions about this Privacy Notice or our practices by emailing us at brusselsprivacyhub@vub.be, emailing our DPO at DPO@vub.be or writing us at:
Brussels Privacy Hub
Pleinlaan 2, 1050 Elsene
Belgium
Updates to our privacy notice
We may update this Privacy Notice from time to time and without prior notice to you to reflect changes in our personal data practices. We will indicate at the top of the policy when it was most recently updated.
Transgressive Behaviour Policy
All people involved in the Summer Academy treat each other with respect, taking each other’s physical and psychological integrity into consideration. They do not intentionally do or say anything which another person could find offensive and regard as a violation of dignity. People address each other with the terms of reference which they themselves prefer.
Any form of unacceptable behaviour – bullying, verbal and physical violence, racism and sexually unacceptable behaviour – and discrimination or neglect on the basis of gender, wealth, civil status, political conviction, trade union allegiance, language, socio-economic situation, class, outlook on life, religion, nationality, skin colour, ethnicity and migration background, age, sexual orientation, gender identity and expression, physical and mental capacities and limitations will not be tolerated, including coercion via peer pressure. This applies to direct communication via words, images, actions, behaviours, and to online communication.
Participants are mutually supportive. Participants that witness discrimination, neglect or unacceptable behaviour do not look away, but try to stop it. They provide support to the victim. If they are unable to stop this undesirable behaviour or do not dare to stop it, then we ask them to report this behaviour, possibly as (anonymous) witnesses to an executive member of the Brussels Privacy Hub.
The full list of executive members can be found on the Brussels Privacy Hub website. Alternatively, you can reach us at BPHSummerAcademy@vub.be.
Participants respect the applicable VUB and external regulations.
In case of emergency, VUB security is reachable via bewaking@vub.be, or via telephone at +32 2 629 11 11 (emergency) or +32 2 629 21 76 (general).

