Greetings from Brussels!
I write to you just as this year’s IAPP European Data Protection Congress comes to an end. Though I’m still processing the amazing conversations and rich content from the last 72 hours, I thought I’d attempt to provide a few key highlights from this whirlwind week in Belgium.
Brussels is a busy place at the moment, as many of you likely know. The alphabet soup of digital regulation is in full swing, so navigating the Digital Services Act, Digital Markets Act, Digital Governance Act and the Data Act will be no small task. Sure, these aren’t purely data protection laws or proposals, but there is some overlap and complexity will only increase. As Mastercard Senior Vice President, Assistant General Counsel, Europe Data Protection Officer Helena Koning, CIPP/A, CIPM, said during the Privacy and Data Protection Forum on our active learning day, “overall, the data compliance space is growing more complicated.” Not only are practitioners feeling the pressure, but data protection regulators voiced concerns, as well. European Data Protection Supervisor Policy and Consultation Head of Unit Anna Buchta mulled how current and new regulators will effectively manage this space, noting that “the shared complexity and fragmentation of enforcement will be very challenging.”
A big focus for me this week involved the proposed Artificial Intelligence Act. Again, not a purely data protection law, but one that significantly overlaps with our space, the AI Act would be the world’s first horizontal regulation of the artificial intelligence ecosystem. For now, the proposal takes a risk-based approach, whereby “high risk” AI would need to run through a number of obligations prior to deployment. The European Parliament is frantically working on its text, while the European Council recently shared its updated text last Friday.
To dive a bit deeper into the Parliament’s work, I visited the European Parliament to discuss the state of play with AI Act co-rapporteur Dragoş Tudorache. He graciously invited me to his office where we discussed the proposal for an hour. He even let me record our conversation, which I intend to release as a podcast very soon, so stay tuned for that! I can tell you up front, the hope for the AI Act is that it will keep up with innovation — through several channels, including its risk-based approach (Tudorache says 80-90% of AI systems would not be regulated by the act), sandboxes, among other potential solutions.
I’d be remiss if I didn’t mention ahead of next week’s World Cup that Wednesday’s opening general session included a fascinating reporting from our own Joe Duball.
I have barely scratched the surface of what I took part in and learned this week, but I can assure you our editorial team will be sharing more content in the coming weeks. Suffice to say, we have a lot of work ahead!
For those of you who attended this week, we hope you enjoyed the show and safe travels home!