A Programme With Top-Level Experts
The Privacy Symposium 2027 will bring together leading data protection authorities, policymakers, practitioners, researchers, academics and industry experts for a week of high-level discussions on privacy, data governance and regulatory compliance.
Through a comprehensive programme of expert-led sessions, the Symposium will explore the latest regulatory, technological and societal developments shaping the future of data protection and responsible data use.
Designed to foster international dialogue, cooperation and knowledge exchange, the programme will provide participants with practical insights, new perspectives and direct access to leading experts from across the global privacy community.
Explore the Tracks
Programme Structure
The programme of the upcoming Privacy Symposium edition is organised in several thematic tracks of sessions: (click on each title to learn more)
This track will examine what trustworthy, transparent and accountable AI demands in practice under a fast-evolving regulatory landscape, from the data used to build and run these systems to questions of human oversight, intellectual property, safety and security. It will also look at what comes next, as AI systems begin to act on their own: taking decisions and carrying out tasks on behalf of users and organisations.
This track will focus on research and innovation in the domain of data protection and compliance. It will involve the research community, both academic and industrial research, together with authorities and practitioners to review and discuss the latest research and development results.
The Scientific Track will feature presentations of selected papers from the Privacy Symposium Call for Papers and discussion among the research community. The Call for Papers aims to identify original papers from researchers and senior practitioners addressing challenges related to data protection, regulatory compliance, and innovative technologies.
This track will look at how data protection rules are converging — and diverging — across regions, as new treaties, adequacy arrangements and interoperability mechanisms take shape. It will consider how digital sovereignty and localisation pressures are reshaping cross-border data flows, and open the floor to authorities and stakeholders working to build common ground and practical cooperation across jurisdictions.
This track will focus on data protection compliance with emerging innovative technologies, such as Quantum, Blockchain, Biometric Data, Neuro Privacy and Neuro Rights, and more. It will bring together technology experts and data protection authorities to discuss technology-related challenges and opportunities for data protection.
This track will address the economics of data protection: what compliance costs, what it returns, and how the debate on simplification and competitiveness is changing that calculation.
This track will deal with the daily reality of applying data protection law, which increasingly has to be read alongside other digital regulation. Authorities, practitioners and other stakeholders will share how they read the requirements, what recent decisions have changed, and which questions remain open.
This track will examine certification as genuine evidence of compliance rather than a paper exercise. It will cover the design, approval and uptake of schemes, seals and codes of conduct, their use as a safeguard for international transfers, and how certification might extend to AI systems. Authorities, certification bodies and certified organisations will share what the process actually involves.
This track will focus on challenges and solutions to secure and protect personal data. It will address cybersecurity-threat landscapes, including AI-assisted attacks, supply chain compromise and ransomware. It will follow the widening set of cybersecurity and resilience obligations, together with the engineering side: authentication, encryption, and preparing for the post-quantum era.
This track aims at facilitating multistakeholder dialogue and cooperation; promoting international data transfers for research purposes; and supporting the secondary use of medical and health data to benefit society as a whole.
It will discuss in detail the impact of the ongoing regulatory changes in Europe and beyond, including on health data sharing, the use of AI and the evolution of medical devices. It will delve deeper into the frameworks for lawful processing for research, highlighting the methods to secure sensitive data and the latest technological developments in practice. Finally, key stakeholders and authorities will explore how international data transfers for medical research are facilitated, while enhancing patients’ rights.
Leading these discussions, the Privacy Symposium is particularly honoured to welcome the Ministers of Health from Greece and Romania. Overall, the health track will feature speakers ranging from high-level authorities to researchers, academics, patients’ associations, and industry representatives. Speakers will share insights and best practices on international cooperation, EHDS, GDPR, the Digital Omnibus, AI Act, MDR, and other regulations’ impact on medical data and research, among other programme topics.
This track will explore where data protection meets freedom of expression and access to information. It will address platform accountability and content moderation, the protection of minors online and the methods used to achieve it, and the space left for journalism, whistleblowing and independent research.
This track will address the terms on which public authorities obtain personal data for law enforcement, security and other public interest purposes. It will cover cross-border access to electronic evidence, data retention, and the discussion over encryption and lawful access. Authorities, industry representatives and academics will discuss what necessity and proportionality require in practice.
This track will focus on the evolving role of Data Protection Officers and data compliance professionals, as their scope of work widens beyond data protection into AI governance and the broader digital rulebook. It will discuss how the role is understood differently across jurisdictions, what the simplification agenda means for the profession, and how the qualification and recognition of DPOs are taking shape. It will bring together DPO associations, practitioners and authorities to consider where the profession is heading.
The ‘Deep Dive In’ sessions will offer a selection of longer, two-hour sessions designed to build practical skills. Through hands-on exercises and discussion of real-life cases and situations, DPOs and practitioners will work directly on the complex obligations they face day to day — and with the people who shape how those obligations are applied.
