International Conference on Data Protection, Compliance, and Technology

The European General Data Protection Regulation (GDPR) had its 6th anniversary in full force in May 2024. Undebatable, it triggered a chain reaction with many other jurisdictions adapting their own regulations, which is often told as a success story. However, is it though?
The original proposition was to improve compliance with data protection law in the EU by harmonization. In particular with other emerging regulations in mind (regulating data flows, artificial intelligence, and cybersecurity), was this overall goal achieved? Did other jurisdictions improve compliance to their privacy legislation? How did technology support or inhibit the uptake of good privacy practices?

The conference at large, but also the scientific track, therefore studies the following questions: what can we learn from more than 6 years of living the GDPR, what have other jurisdictions learned from the EU, and what can the EU learn from them? What can technology contribute? The conference promotes international dialogue, cooperation and knowledge sharing on data protection, compliance, and innovative technologies. It connects legal and technology experts with researchers, authorities, and professionals. We solicit papers that present original research addressing challenges related to data protection compliance with innovative technologies. In particular, we welcome multidisciplinary work that combines legal, technical, and societal expertise. We accept research and academic papers, as well as industry and practitioner papers with a solid scientific foundation.

Submitted papers will undergo a thorough peer review. All submissions will receive at least 3 reviews by our multidisciplinary programme committee. Top quality papers will be invited for presentation. Accepted papers will be published in the Springer conference proceedings and the Springer-Link Digital Library. They will also be indexed by leading Abstracting and Indexing (A\&I) databases like Scopus, DBLP, ISI, Google Scholar, etc. Papers of particular merit will be recommended for a potential special issue in an international journal. There will also be a best paper award.

We particularly encourage submissions that fall under one of the following thematic areas:
• Track 1: Law and Data Protection
o multidisciplinary approaches, arbitration, and balance in data protection,
o international law and comparative law in data protection and compliance,
o competition law and data protection,
o cross-border data transfer approaches and solutions,
o international evolution of data protection regulations,
o interaction between regulations, standards, and soft law in data protection,
o data subject rights and data portability.
• Track 2: Technology and Compliance
o emerging technologies compliance with data protection regulation,
o privacy in blockchain and distributed ledger technology,
o data protection compliance in Internet of Things, edge, and cloud computing,
o privacy-preserving mobility and connected vehicles,
o smart cities and data protection,
o privacy enhancing technologies (PET), anonymisation and pseudonymisation,
o privacy by design and by default,
o privacy engineering,
o data sovereignty.
• Track 3: Cybersecurity and Data Protection
o privacy-aware threat monitoring
o security by design for data protection,
o privacy-aware and compliant authentication and authorisation,
o identity theft and identity usurpation.
• Track 4: Data Protection in Practice
o audit and certification methodologies,
o domain-specific data protection best practices (e.g., in health),
o privacy engineering in practice,
o innovation management and data protection,
o economic models and impact of data protection and compliance management.
• Track 5: Artificial Intelligence, Privacy, and Data Protection
o AI impact on privacy and data protection
o AI for data protection: machine learning and privacy policies, AI-supported privacy decisions, smart assistants and
privacy
o data protection for AI: privacy-preserving federated learning, data altruism and consent in training models, data
protection and AI risk assessments
• Track 6: Socio-economic Dimension of Privacy, Data Protection, and Compliance
o data monetisation and valuation
o data protection and environmental, social, and governance
o data protection compliance, economy, and financial sector
• Track 7: Space and Data Protection
o Satellite communications, data regulations and personal data protection
o Earth observation data and privacy
o AI ethics in space-based data collection and processing
o Space-based data interoperability and data sovereignty
o Privacy standards for space infrastructure

Further information
For more information on the conference visit: www.privacysymposium.org
For information on the venue, please visit: www.unive.it/pag/13526
For specific questions on the call for paper, you can contact: contact@privacysymposium.org

Paper Submissions and Publication Guidelines
Papers shall be in English and up to 20 pages, shorter papers are encouraged. Authors are invited to use preferably the LNCS’s Latex template or the MS Word Template, available through this link: https://www.springer.com/gp/computer-science/lncs/conferenceproceedings-guidelines. Only PDF files will be accepted for the review process.
All submissions must be done through EasyChair online submission system at: https://easychair.org/conferences/?conf=privinno2025

Submitted papers must not be currently under review in any other conference or journal and must not have been published previously. Final papers accepted for publication must conform to the LNCS Formatting Guidelines. The Privacy Symposium conference series takes the protection of intellectual property seriously. Accordingly, all submissions will be screened for plagiarism using a plagiarism tool. By submitting your work, you agree to allow Springer to screen your work.

Patronage Opportunities
Different patronage packages are available to companies that would be interested to get visibility at the conference and can be requested by mail at vip@privacysymposium.org

Programme Committee
General Chair: Dr Sébastien Ziegler, European Centre for Certification and Privacy (ECCP) / IoT Forum
Programme Chairs:
• Dr Stefan Schiffner, BHH Hamburg, Germany, Co-chair
• Alessandro Bernes, Ca’ Foscari University of Venice, Italy
• Prof Paolo Balboni, Maastricht University, Founding Partner of ICT Legal Consulting
• Prof Peter Swire, Georgia Institute of Technology
• Adrián Quesada Rodriguez, Mandat International, ECCP
• David Goodman, Trust in Digital Life