When a data breach occurs, class actions can quickly follow—but the way they unfold varies dramatically across jurisdictions. Starting from a case example inspired by a recent real-life incident this session will explore how class actions are initiated and managed in different legal systems. Our panel of experts will discuss:

• The role of Data Protection Authorities versus courts in opening cases
• How groups or classes are identified
• Key risks for companies and claimants
• Precedent cases shaping current practices
• Gain a comparative view of the pros and cons of each mechanism and practical insights to navigate these complex proceedings.

Speakers:

• Bartosz Sujeki, Lawyer at Van Diepen Van der Kroef (Netherlands)
• HyeJin Hwang, Partner at DLG Law Corporation (South Korea)
• Kelly Dickson, Principal Lawyer at Macpherson Kelley (Australia)
• Trevor Fenton, Partner at Shakespeare Martineau (UK)

Managing a cyber crisis is never simple—and the best defense is preparation. This session explores why organizations must plan ahead to handle the intricate interplay of legal, security, and communication requirements when a breach occurs. Our experts will break down:

• The legal obligations and timelines for reporting and compliance

• The security measures needed to contain and investigate incidents

• The communication strategies for managing public perception and regulatory engagement

• How these three perspectives intersect and why coordination is critical

• Practical steps to build a breach response plan that works under pressure

By the end, you’ll understand how to align legal, technical, and communication teams for a unified, effective response.

Speakers:

• Charlotte Riley, Director for Information Security and Technology at CSS Assure (UK)
• Padraig Walsh, Partner at Tanner de Witt (Hong Kong)
• India Bednall, Director of Strategic Communication at FTI Consulting (Australia)

This session provides a concise overview of the Digital Omnibus proposal, highlighting the key legal uncertainties and interpretative challenges emerging across Europe. Beatriz Rodríguez Gómez (RocaJunyent, Spain), currently preparing an opinion for the EDPB, will outline the proposal’s main issues and the broader debates at EU level, where several points remain contested or lack a unified interpretation.

Building on this context, Gerald Trieb (Knyrim Trieb Attorneys at Law, Austria) will examine one of the most debated elements of the proposal: the redefinition of personal data. Drawing on the EDPS v SRB decision, he will explain the reasoning behind this shift, why it has sparked controversy, and what it could mean in practice for classification, risk assessment, and compliance.

Together, the speakers will shed some light on both the general legal challenges surrounding the Digital Omnibus and the specific controversy of the new personal data definition.

Speakers

• Beatriz Rodriguez Gomez, Parnter at RocaJunyent (Spain)
• Geral Trieb, Partner at Knyrym Trieb Attorneys at Law (Austria)

• Luiza Sato, Partner at Tozzini Freire (Brazil)
• Carla Guillemot, Senior Legal Counsel, DPO, at Ubisoft (France)
• Stephen Mathias, Partner at Kochhar & Co. (India)
• Sara Brandstätter, Data Privacy & Security Reporter at MLex

As we enter 2026, the global health sector is navigating a paradigm shift: the transition from viewing data as a static record to treating it as a dynamic engine for AI-driven innovation. However, this “revolution” faces significant hurdles in data sovereignty, intellectual property, and public trust.

In this session, Anushka Sachdev (Attorney at Timelex) will discuss if the European Health Data Space is setting a new global standard for secondary use. Moving to the Americas, Mariela de la Guardia Oteiza (Partner at Icaza, González-Ruiz & Alemán) will share how Panama is bridging regional digital gaps, while Sara Capillo (Corporate Governance Coordinator at Grupo Fleury) will explore how Brazil’s massive digital ecosystem balances rapid AI growth with intricate IP frameworks.

Beyond the theory, our experts will examine whether these frameworks are truly ready to support a sustainable, collaborative, and fair global health economy. Participants will walk away with a practical roadmap of the “user journey” for international health datasets—from data discovery to the steps required for compliance. 

Speakers

• Anushka Sachdev, Attorney at Timelex (Belgium)
• Sara Cepillo, Corporate Governance Coordinator at Grupo Fleury (Brazil)
• Mariela de la Guardia Oteiza, Partner at Icaza, González-Ruiz & Alemán (Panama)

Artificial Intelligence is transforming the fintech sector—but with innovation comes risk. This session brings together experts from North America (USA), Africa (Kenya), and the Middle East (Saudi Arabia) to explore how AI is reshaping financial services and what organizations must do to stay compliant and secure. Key discussion points include: 

• Recent laws and regulatory frameworks impacting AI in fintech 
• Current adoption stages in different regions—are these markets ready? 
• Risk management essentials: what boards need to know before investing 
• The DPO’s role in safeguarding privacy and ensuring compliance 
• How misplaced privacy considerations can derail projects or investments 
• Practical steps to assess and mitigate risks in AI-driven processes 

This session offers actionable insights for decision-makers and compliance professionals navigating the intersection of AI, finance, and regulation. 

Speakers:

• Janet Othero, Managing Partner at Cavendrys (Kenya)
• Muneeb Imran Shaikh, Information Security, Data Privacy and AI Governance Consultant (Saudi Arabia/Middle East)
• Katelyn E. Moody, Lawyer at FBT Gibbons (USA)

AI-driven recruitment tools are increasingly becoming part of everyday business reality. At the same time, their black-box and autonomous features create significant legal and ethical minefields. These challenges become particularly complex in cross-border recruitment contexts, where legal and regulatory approaches differ, though core ethical principles remain broadly shared. This session will address common issues associated with deploying AI solutions during recruitment. In particular, our experts will discuss: 

• Key elements of the EU framework and compliance requirements 
• Challenges in Canada where no specific AI recruitment framework exists 
• How companies can navigate multiple frameworks simultaneously 
• The role of AI governance frameworks as the foundation for responsible use in HR 
• Risk assessment methods to ensure responsible AI use in hiring 

This session provides practical strategies and actionable guidance for organizations deploying AI in recruitment to avoid compliance pitfalls and manage legal and reputational risks. 

Speakers

• Mike Swift, Chief Global Digital Risk Correspondent at MLex
• Kristen Pennington, Partner at McMillan (Canada)
• Endre Varady, Partner at VJT Partners (Hungary)