The DPO Centre

The European Commission’s announcement of its Digital Omnibus package proposal has set off one of the biggest privacy debates in years. On paper, it promises modernisation and simplification, but many are questioning what these potential changes could mean for the foundations of the GDPR. Is it an evolution or erosion of the gold standard that made it the global benchmark?

Join our expert panel for early reactions as they weigh up the pros and cons. They’ll challenge assumptions, discuss the details, and explore what matters most for organisations potentially facing another wave of regulatory change.

What we’ll discuss:

·      The biggest shifts proposed by the Digital Omnibus

·      Whether the EU AI Act is already out of date and what it means for AI projects

·      Does merging data laws simplify anything in practice?

·      Whether the GDPR can remain the global benchmark with rising pressure to ‘modernise’

The Digital Omnibus could redefine the direction of the GDPR and AI governance for years to come. Don’t miss this opportunity to join the debate and stay ahead of the potential changes. We’ll close with a live Q\&A, giving you the chance to ask questions and leave with a clearer view of what to monitor as the proposals move through the legislative process.


TERMINUS OR TURNING POINT? The Digital Omnibus and the future of GDPR and AI

The secondary use of health data is becoming one of the biggest drivers of innovation across clinical research. But as AI technology advances and EU and UK regulations evolve, CROs and sponsors need to think ahead about how trial data might be used, or reused, in the future. 

Join session moderator Ben Seretny, COO at The DPO Centre, alongside Lawrence Carter, DPO and Life Sciences Sector Lead, and Pippa Scotcher, DPO, for a forward-looking discussion on how AI and diverging governance frameworks are likely to impact the future of secondary data use and informed consent in clinical trials. 

You’ll learn: 

*   How EU and UK regulatory reforms are reshaping secondary use of data 
*   The growing role of AI in expanding the value and risk of health data reuse 
*   What this means for informed consent and site-level secondary data use 
*   Practical steps CROs and sponsors can take to prepare for evolving governance and ethical requirements 

This session will close with an open Q\&A discussion, with practical insights on how to stay compliant, future-ready and confident as AI redefines the boundaries of research data. 


DOUBLE BLIND: Secondary use of health data and AI in clinical trials 

I sistemi CRM sono strumenti fondamentali per massimizzare l’efficienza dei team di marketing e vendita. Tuttavia, gestire i dati dei sistemi CRM nel rispetto dei requisiti normativi del GDPR può risultare complesso. Conservare i dati troppo a lungo espone a rischi di non conformità, mentre eliminarli troppo presto significa perdere informazioni preziose. Gli esperti di protezione dei dati di The DPO Centre, insieme ad altri professionisti del settore, condivideranno soluzioni pratiche per bilanciare conformità normativa e sviluppo commerciale. Questa sessione è rilevante per responsabili della gestione dei dati nei software CRM.


TROPPO PRESTO O TROPPO TARDI? Conservazione dei dati nei CRM e conformità GDPR

Data Subject Access Requests (DSARs) in the Healthcare sector present unique challenges due to the sensitive nature of patient information. Responding to these requests requires not only an understanding of regulatory requirements but also a strategic approach to safeguarding personal data.

Join our specialist DPO, Dom Newton, and industry experts as they discuss the complexities of handling DSARs in Healthcare. From their many years of experience, you’ll gain insights into some of the practical strategies you can apply to reduce risk, ensure compliance with data protection laws, and protect patient data throughout the entire DSAR response process.

***

###### If you register to watch this webinar, your information will be used for the purpose of organising and communicating information about The DPO Centre Privacy Puzzle webinar series, which includes all the information provided in the registration sign-up form. We will also occasionally contact you about services and content that we feel are both relevant and of interest to you. 

###### *You can view The DPO Centre's Privacy notice *[*here*](https://www.dpocentre.com/privacy-notice/)*.*


STRICTLY CONFIDENTIAL: Reducing risk in health & social care DSAR responses

With the increasing use of informal messaging platforms like Slack, Teams and WhatsApp for business communication, organisations are facing new challenges in responding to Data Subject Access Requests (DSARs). The unstructured nature of these platforms makes it difficult to track, retrieve, and manage the necessary data for DSAR compliance. 

In the second webinar in our DSAR Privacy Puzzle Global Webinar series, Caroline Burgess, Data Protection Support Officer and DSAR specialist, discusses how to overcome these challenges.

Joined by industry insiders, they’ll explore some of the tools, techniques, and best practices that can help you tackle the unique hurdles of handling DSARs across chat-based communication channels. 

***

###### If you register to watch this webinar, your information will be used for the purpose of organising and communicating information about The DPO Centre Privacy Puzzle webinar series, which includes all the information provided in the registration sign-up form. We will also occasionally contact you about services and content that we feel are both relevant and of interest to you. 

###### *You can view The DPO Centre's Privacy notice *[*here*](https://www.dpocentre.com/privacy-notice/)*.*


DSARS IN THE CHATROOM: Finding data across informal messaging channels 

To kick-off our Privacy Puzzle DSAR webinar mini-series, The DPO Centre’s Matt Spall is joined by Angie Crush - Head of Employment Law

at Omny Law to discuss the changes introduced by the UK’s Data Use and Access Act 2025 (DUAA) and how your organisation might be affected. 

If your team already follows best practice for Data Subject Access Requests (DSARs), your processes may not need a complete overhaul. But you need to be aware of some important updates, including: 

*   Searches must be reasonable and proportionate 
*   Legal exemptions must be clearly explained to individuals 
*   Individuals can now challenge exemption decision via the ICO 

Whether you’re designing a new DSAR process or fine-tuning for DUAA updates, this session will help you remain compliant and avoid the common pitfalls that lead to delays and complaints. 

***

###### If you register to watch this webinar, your information will be used for the purpose of organising and communicating information about The DPO Centre Privacy Puzzle webinar series, which includes all the information provided in the registration sign-up form. We will also occasionally contact you about services and content that we feel are both relevant and of interest to you. 

###### *You can view The DPO Centre's Privacy notice *[*here*](https://www.dpocentre.com/privacy-notice/)*.*


THE DATA CHASE: DSAR compliance under the UK’s new data law 

According to McKinsey’s latest Global Survey on AI, over 75% of organisations are using AI in at least one business function. As AI reshapes business operations, many companies are appointing AI Officers to lead strategy, ethics, and risk management. Others are relying on their DPOs to manage oversight and guide responsible deployment. But who is best placed to govern the machines—a seasoned DPO or a dedicated AI Officer?  

Join David Smith, AI Sector Lead and DPO at The DPO Centre, Angelique Hamilton DPO at The DPO Centre Canada, Todd Daubert, Partner at Dentons, Washington DC, and James Robson, Data Protection Officer at The Labour Party, as they tackle some of the most pressing AI governance questions facing organisations today: 

*   Where do DPO responsibilities end and AI Officer duties begin? 
*   How do the different UK-EU-US regulatory approaches affect AI governance? 
*   What are the risks of misalignment between AI innovation and data protection obligations? 
*   Are organisations ready for AI at scale? 

Whether you’re exploring AI deployment, managing risk, or redefining what your data governance should look like, this is a must-attend webinar for leaders deciding who should really be minding the machines. 

***

###### If you register to watch this webinar, your information will be used for the purpose of organising and communicating information about The DPO Centre Privacy Puzzle webinar series, which includes all the information provided in the registration sign-up form. We will also occasionally contact you about services and content that we feel are both relevant and of interest to you. 

###### *You can view The DPO Centre's Privacy notice *[*here*](https://www.dpocentre.com/privacy-notice/)*.*


Privacy Puzzle: MINDING THE MACHINES: AI Officer vs DPO

CRM systems help drive sales and marketing, but balancing GDPR compliance requirements can be a challenge. Holding data for too long can lead to non-compliance, while deleting it too soon can cost valuable insights. Join data protection experts from The DPO Centre and industry leaders as they explore practical solutions for balancing compliance and business growth. If you manage CRM data, you won’t want to miss this session. 

***

###### If you register to watch this webinar, your information will be used for the purpose of organising and communicating information about The DPO Centre Privacy Puzzle webinar series, which includes all the information provided in the registration sign-up form. We will also occasionally contact you about services and content that we feel are both relevant and of interest to you. 

###### *You can view The DPO Centre's Privacy notice *[*here*](https://www.dpocentre.com/privacy-notice/)*.*


The Privacy Puzzle: LET IT GO: CRM data retention and GDPR compliance

The Data (Use and Access) Bill has finally passed through Parliament and marks the first major reform to the UK GDPR since Brexit. But is this simply regulatory fine-tuning or the beginning of a new, more strategic shift in the UK’s approach to data governance?

Join data protection experts from The DPO Centre as they unpack what this legislative change is likely to mean in practice.

We’ll be discussing:

*   What the new ‘not materially lower’ standard for international data transfers could mean for EU adequacy
*   How the introduction of ‘recognised legitimate interests’ could simplify compliance and reshape assessments
*   Why the final compromise on AI and copyright could shape future policymaking and the governance of AI training


Privacy Puzzle: FROM GDPR TO DUA: Compliance reform or strategic pivot?

According to several studies, the trend on tracking is clear: around 70% of US companies, nearly 40% in the UK, and one in four across the EU now use AI-powered tools to oversee staff activity. But as technologies evolve faster than workplace privacy policies, organisations face a growing challenge – how far is too far when it comes to monitoring? 

In this panel discussion, expert DPOs from The DPO Centre will be joined by industry experts, to explore the tension between innovation and intrusion, and tackle the questions many are reluctant to ask. 

Discussion points include: 

*   If employees are paid to work, why shouldn’t employers track how that time is spent? 
*   Can trust and transparency survive with increased AI-powered oversight? 
*   Where should we draw the ethical line between smart monitoring and surveillance? 
*   What your organisation can (and can’t) do under UK and EU data protection laws 
*   Practical ways to apply fairness, consent, and accountability to AI-driven decisions 

AI isn’t just changing how we work, but how we’re observed and assessed. This session is your opportunity to get ahead of the curve, understand where the ethical boundaries lie, and how to balance oversight and trust with responsible monitoring. 
