Data Protection Virtual Conference 2022

Introduction

This live virtual conference chaired by Robert Bond, with a panel of experts will provide you with an in-depth look at a range of data protection topics.

Conference Agenda

10:00am - 11:00am: International Data Transfers post Schrems II

Robert Bond

Transfers of personal data from the European Economic Area (EEA) to other jurisdictions have been affected by a combination of the CJEU decision known as Schrems II, the declaration on the invalidity of the EU-US Privacy Shield and guidance from the European Data Protection Board (EDPB) on Standard Contractual Clauses (SCC).

Robert Bond will cover the following:

• The Schrems II decision
• The EDPB guidance
• The draft updated SCC
• The restrictions on data transfers and the exemptions
• The position post Brexit
• Practical steps towards compliance

AM Break

11.10am - 12.10pm: Cyber Threats & How to Protect Your Data

Dr Stephen Hill, Hill Bingham Ltd

This session is focused on helping organisations navigate the potential cyber security vulnerabilities and threats that face their business and data in the hyper-connected world we operate in today. With more and more of us now 'working remotely' this has added additional security risks to the organisation.

Verizon’s recent Data Breach Investigations Report identified 85% of breaches involved the human element and many cases took attackers minutes or less to compromise systems. Organisations, however, took weeks or more to discover that a breach had even occurred. Verizon also reported in their 2021 report that ransomware had continued to become a very dangerous digital weapon and would continue to do so in 2022 with 95% of reported breaches costing between £50 - £850,000.

With the rapid pace of technological transformation and the recent pandemic we have witnessed major changes to the way data is collected, accessed, used and transferred. In addition, organisations are experiencing more pressure from both the regulators and new data protection legislation and more individuals worrying about their own personal data especially in light of recent data breach headlines. Organisations must therefore ensure they are taking every measure to protect their data and are able to safely navigate the cyber threats in 2022 and beyond. This session will help you to understand the current threats of cyber-crime and the steps you need to take to protect your data from attack or exposure. We will cover the following:

• Cyber threats to your business and risks linked to data exposure
• Identify the safeguards required to protect your data
• Safeguarding techniques to protect data including encryption and multi factor authentication
• Mobile device management and working in a new hybrid environment

12:10pm - 1:10pm: Preparing for & Responding to Subject Access Requests

Clare Paterson, Anthony Collins Solicitors

This session will build on your existing knowledge of the legal right of access to personal data, and focus on how to prepare for requests proactively, and how to navigate some of the trickiest aspects of responding to SARs.

The number one mistake made when responding to a SAR will be revealed, and you will learn how to avoid it, as well as:

• How to manage SAR expectations
• How to co-ordinate SAR responses
• When requests can be refused
• When the time extension should be applied
• How to apply the third party rights exemption and some other commonly used exemptions
• An overview of some of the less commonly used exemptions
• How to always be prepared for a SAR
• How to reduce the number and scope of SARs

Break for Lunch

2:00pm - 3:00pm: Lloyd v Google LLC and Other Recent Cases of Interest

Ian Beeby, Barrister at 10 King’s Bench Walk

This session will review and summarise recent key data protection cases including Lloyd v Google LLC and HRH The Duchess of Sussex v Associated Newspapers Ltd together with references and AG opinions concerning Facebook and regulatory action concerning TikTok.

The objective will be to develop an understanding of ongoing GDPR compliance issues as well as any indications of divergence between UK and EU jurisprudence.

PM Break

3:15pm - 4:15pm: Developments in Global Data Protection Laws and Regulations

Robert Bond

The continuing growth of data protection laws around the world are impacting legal and regulatory compliance for multinationals and their supply chains.

This session will address:

• Developing laws and regulations
• Impact of GDPR & CCPA on other jurisdictions
• Examples of similarity of definitions and principles
• Developing and implementing global policies

Recording of live sessions: Soon after the Learn Live session has taken place you will be able to go back and access the recording - should you wish to revisit the material discussed.