IAPP Europe Congress 2026
Privacy | AI governance | Cybersecurity law
BRUSSELS
16-19 November
GPA: When National Security Becomes a Data Governance Issue
Wednesday, 18 Nov.
15:00 - 16:00 CET
Intermediate level
Part of the Global Privacy Assembly Open Programme.
Geopolitical risk and resilience are no longer data governance considerations reserved for those crafting defense policy or concerned with protection of critical infrastructure. Increasingly, commercially held data is seen as a national security asset and risk that should be protected accordingly. How are chief privacy and AI governance officers approaching these risks inside governments and companies? What international frameworks and legal rules guide their approach? How can regulators balance national security mandates with fundamental privacy rights? Join us for a discussion of the policy considerations, operational impacts and insights into what is working well and what is not.
What you will learn:
- How the OECD declaration on government access to personal data held by private sector entities is working in practice.
- How companies and regulators are approaching national security risks and rules concerning data transfers.
- How AI developments are shifting both risks and response.
Featured in this session

Travis LeBlanc
Partner
Cooley

Clarisse Girot
Head of Division, Data Flows, Governance and Privacy, Online Safety
OECD

Jorge Oliveira e Carmo
CIPM
Head of Data Protection and Cybersecurity Risk
FIFA

Rebecca Richards
CIPP/G, CIPP/US
Chief, Office of Civil Liberties, Privacy and Transparency
Office of the Director of National Intelligence