This panel will delve into the complex world of data privacy risk management. This session aims to demystify the concept of risk in the context of data privacy, providing attendees with a comprehensive understanding of methodologies for identifying and assessing privacy risks.

This session will explore the latest trends and best practices in digital compliance, highlighting the shift from standalone privacy programs to more integrated, multi-domain compliance programs.

Once considered unlikely but now a reality, the UK has enacted the Data Use and Access Act (DUA Act). This landmark reform has positioned the UK as a pioneer in making targeted changes to its data protection framework, offering a distinct alternative to the EU’s approach and prompting interest worldwide. This session will begin by unpacking the key provisions of the DUA Act and what they mean for organisations operating in the UK today. We will then broaden the conversation to consider the wider UK digital regulatory landscape—examining what is working well for businesses, where challenges remain, and how regulation is shaping innovation, competitiveness, and trust. Finally, we will place the UK experience in a global context, comparing lessons learned with the EU and exploring how the UK’s evolving approach might influence the international privacy and digital policy conversation in the years ahead.

What are the impacts of the new DUA Act on the Information Commission. This session will explore the new regulatory focus, priority areas and what the changes mean and don’t mean for the UK. The panel will explore the IC’s new duties and the impact of these on wider policy goals and how this might impact existing and new guidance.

As AI technologies become increasingly integrated into organizational operations, DPOs face new challenges in ensuring compliance with data protection regulations. This panel will explore the evolving role of DPOs in the age of AI, addressing the complexities of data processing, risk assessment, and regulatory compliance. Drawing from recent guidance and regulatory developments, the discussion will provide practical insights for DPOs to effectively manage AI-related privacy concerns.