DPAs and Certification Systems: How Good Are They as Compliance Instruments?

  • Panel
  • Class Room
  • Friday 23.05 — 08:45 - 10:00

Organising Institution

CPDP

Belgium

  • Academic 2
  • Business 2
  • Policy 2
In Articles 42 and 43, the GDPR sets out provisions for the formation and use of accredited certification systems so that data controllers and processors can demonstrate their compliance with the law. Such systems, including standardization, can play an important part in the fulfilment of data subjects’ rights and in data protection oversight arrangements. Data protection authorities, as supervisory authorities, and EU institutions play a key part in the establishment and regulation of certification, and the establishment and application of relevant standards are important in these processes. But many questions can be asked, including:

Questions to be answered

  1. How have certification schemes developed in the EU?
  2. What problems and opportunities have been encountered on the way to certification?
  3. What are the experiences of DPAs, data controllers and certification bodies in the EU and elsewhere with these schemes as part of the regulatory toolkit?
  4. What are the views of consumer and civil society organizations on such voluntary schemes? To what extent can they contribute to building trust, confidence, transparency and accountability?

Moderator

Ivan Szekely

Central European University/Blinken OSA Archivum - Hungary

Dr. Ivan Szekely, social informatist, is an internationally known expert in the multidisciplinary fields of data protection and freedom of information. Former chief counsellor of the Hungarian Data Protection ombudsman, and associate professor at the Budapest University of Technology and Economics, Szekely is at present Senior Research Fellow and Counsellor of the Vera and Donald Blinken Open Society Archives at Central European University. His research interests and publications are focused on information autonomy, openness and secrecy, privacy, identity, surveillance and resilience, memory and forgetting, and archivistics.

Speaker

Charles Raab

University of Edinburgh - United Kingdom

Professor Emeritus Charles Raab, University of Edinburgh: Fellow, Alan Turing Institute (ATI), co-Chair, ATI Data Ethics Group; co-Director, CRISP; Biometrics & Forensics Ethics Group (Home Office); Digital Identity Scotland Expert Group (Scottish Govt); Indep. Ethics Advisory Panel (Police Scotland). Research: privacy, data protection, surveillance, regulatory policy/ practice, data ethics, identification, security, democracy. Publications include The Governance of Privacy (2006); A Report on the Surveillance Society (2006); Specialist Adviser, House of Lords Constitution Cttee for Surveillance: Citizens and the State, 2009; FAcSS, FRSA.

Speaker

Colin Bennett

University of Victoria - Canada

Colin Bennett is Emeritus Professor of Political Science and Fellow at the Center for Global Studies at the University of Victoria, British Columbia. For over thirty years, his research has focused on the comparative analysis of privacy protection policy at domestic and international levels. In addition to numerous scholarly and newspaper articles, he has published seven books on these subjects, including The Governance of Privacy (MIT Press, 2006), as well several policy reports for national and international agencies. His current work focusses on the importance of privacy for democratic rights, and on the capture and use of voters’ personal data by political parties in Western democracies.

Speaker

Marit Hansen

Privacy Commissioner, Schleswig-Holstein, DE - Germany

Since July 2015, Marit Hansen is the Privacy Commissioner Schleswig-Holstein and Chief of Unabhängiges Landeszentrum für Datenschutz (ULD). Before being appointed Privacy Commissioner, she was Deputy Comissioner (since 2008) and in charge of the "Privacy Technology Projects" Division and the "Innovation Centre Privacy & Security" within ULD. Since her diploma in computer science in 1995 she has been working on privacy and security aspects with a focus on Privacy by Design from both the technical and the legal perspectives.

Speaker

Sébastien Ziegler

Europrivacy - Luxembourg

Sébastien Ziegler serves as Chair of the Privacy Symposium and President of the Europrivacy International Board of Experts of the European Centre for Certification and Privacy. He also serves as President of the IoT Forum. As founder and Director General of Mandat International, he is actively supporting international cooperation. He also served as Rapporteur on Research and Emerging Technologies at the International Telecommunication Union (ITU/SG20), and he initiated and/or took part in over 30 international research projects largely related to data governance. Sébastien has a PhD in Management with a specialization in Information Systems at the Faculty of Economy and Management of the University of Geneva. He graduated in International Relations at the Graduate Institute of International Studies, followed by a Master in Environment, a MBA in international administration (HEC Geneva), and complementary executive courses at Harvard Business School in Boston, Stanford University, UC Berkeley and EPFL. He is also a qualified expert in data protection accredited for Europrivacy, EuroPriSe and ISO 27001 certifications. Sébastien founded several foundations, SMEs, and organizations.