The DPO Centre

According to several studies, the trend on tracking is clear: around 70% of US companies, nearly 40% in the UK, and one in four across the EU now use AI-powered tools to oversee staff activity. But as technologies evolve faster than workplace privacy policies, organisations face a growing challenge – how far is too far when it comes to monitoring? 

In this panel discussion, expert DPOs from The DPO Centre will be joined by industry experts, to explore the tension between innovation and intrusion, and tackle the questions many are reluctant to ask. 

Discussion points include: 

*   If employees are paid to work, why shouldn’t employers track how that time is spent? 
*   Can trust and transparency survive with increased AI-powered oversight? 
*   Where should we draw the ethical line between smart monitoring and surveillance? 
*   What your organisation can (and can’t) do under UK and EU data protection laws 
*   Practical ways to apply fairness, consent, and accountability to AI-driven decisions 

AI isn’t just changing how we work, but how we’re observed and assessed. This session is your opportunity to get ahead of the curve, understand where the ethical boundaries lie, and how to balance oversight and trust with responsible monitoring. 


BIRD’S AI VIEW: The boundaries of employee monitoring in today’s workplace

The European Commission’s announcement of its Digital Omnibus package proposal has set off one of the biggest privacy debates in years. On paper, it promises modernisation and simplification, but many are questioning what these potential changes could mean for the foundations of the GDPR. Is it an evolution or erosion of the gold standard that made it the global benchmark?

Join our expert panel for early reactions as they weigh up the pros and cons. They’ll challenge assumptions, discuss the details, and explore what matters most for organisations potentially facing another wave of regulatory change.

What we’ll discuss:

·      The biggest shifts proposed by the Digital Omnibus

·      Whether the EU AI Act is already out of date and what it means for AI projects

·      Does merging data laws simplify anything in practice?

·      Whether the GDPR can remain the global benchmark with rising pressure to ‘modernise’

The Digital Omnibus could redefine the direction of the GDPR and AI governance for years to come. Don’t miss this opportunity to join the debate and stay ahead of the potential changes. We’ll close with a live Q\&A, giving you the chance to ask questions and leave with a clearer view of what to monitor as the proposals move through the legislative process.


TERMINUS OR TURNING POINT? The Digital Omnibus and the future of GDPR and AI

The secondary use of health data is becoming one of the biggest drivers of innovation across clinical research. But as AI technology advances and EU and UK regulations evolve, CROs and sponsors need to think ahead about how trial data might be used, or reused, in the future. 

Join session moderator Ben Seretny, COO at The DPO Centre, alongside Lawrence Carter, DPO and Life Sciences Sector Lead, and Pippa Scotcher, DPO, for a forward-looking discussion on how AI and diverging governance frameworks are likely to impact the future of secondary data use and informed consent in clinical trials. 

You’ll learn: 

*   How EU and UK regulatory reforms are reshaping secondary use of data 
*   The growing role of AI in expanding the value and risk of health data reuse 
*   What this means for informed consent and site-level secondary data use 
*   Practical steps CROs and sponsors can take to prepare for evolving governance and ethical requirements 

This session will close with an open Q\&A discussion, with practical insights on how to stay compliant, future-ready and confident as AI redefines the boundaries of research data. 


DOUBLE BLIND: Secondary use of health data and AI in clinical trials 

I sistemi CRM sono strumenti fondamentali per massimizzare l’efficienza dei team di marketing e vendita. Tuttavia, gestire i dati dei sistemi CRM nel rispetto dei requisiti normativi del GDPR può risultare complesso. Conservare i dati troppo a lungo espone a rischi di non conformità, mentre eliminarli troppo presto significa perdere informazioni preziose. Gli esperti di protezione dei dati di The DPO Centre, insieme ad altri professionisti del settore, condivideranno soluzioni pratiche per bilanciare conformità normativa e sviluppo commerciale. Questa sessione è rilevante per responsabili della gestione dei dati nei software CRM.


TROPPO PRESTO O TROPPO TARDI? Conservazione dei dati nei CRM e conformità GDPR

Data Subject Access Requests (DSARs) in the Healthcare sector present unique challenges due to the sensitive nature of patient information. Responding to these requests requires not only an understanding of regulatory requirements but also a strategic approach to safeguarding personal data.

Join our specialist DPO, Dom Newton, and industry experts as they discuss the complexities of handling DSARs in Healthcare. From their many years of experience, you’ll gain insights into some of the practical strategies you can apply to reduce risk, ensure compliance with data protection laws, and protect patient data throughout the entire DSAR response process.

***

###### If you register to watch this webinar, your information will be used for the purpose of organising and communicating information about The DPO Centre Privacy Puzzle webinar series, which includes all the information provided in the registration sign-up form. We will also occasionally contact you about services and content that we feel are both relevant and of interest to you. 

###### *You can view The DPO Centre's Privacy notice *[*here*](https://www.dpocentre.com/privacy-notice/)*.*


STRICTLY CONFIDENTIAL: Reducing risk in health & social care DSAR responses

With the increasing use of informal messaging platforms like Slack, Teams and WhatsApp for business communication, organisations are facing new challenges in responding to Data Subject Access Requests (DSARs). The unstructured nature of these platforms makes it difficult to track, retrieve, and manage the necessary data for DSAR compliance. 

In the second webinar in our DSAR Privacy Puzzle Global Webinar series, Caroline Burgess, Data Protection Support Officer and DSAR specialist, discusses how to overcome these challenges.

Joined by industry insiders, they’ll explore some of the tools, techniques, and best practices that can help you tackle the unique hurdles of handling DSARs across chat-based communication channels. 

***

###### If you register to watch this webinar, your information will be used for the purpose of organising and communicating information about The DPO Centre Privacy Puzzle webinar series, which includes all the information provided in the registration sign-up form. We will also occasionally contact you about services and content that we feel are both relevant and of interest to you. 

###### *You can view The DPO Centre's Privacy notice *[*here*](https://www.dpocentre.com/privacy-notice/)*.*


DSARS IN THE CHATROOM: Finding data across informal messaging channels 

To kick-off our Privacy Puzzle DSAR webinar mini-series, The DPO Centre’s Matt Spall is joined by Angie Crush - Head of Employment Law

at Omny Law to discuss the changes introduced by the UK’s Data Use and Access Act 2025 (DUAA) and how your organisation might be affected. 

If your team already follows best practice for Data Subject Access Requests (DSARs), your processes may not need a complete overhaul. But you need to be aware of some important updates, including: 

*   Searches must be reasonable and proportionate 
*   Legal exemptions must be clearly explained to individuals 
*   Individuals can now challenge exemption decision via the ICO 

Whether you’re designing a new DSAR process or fine-tuning for DUAA updates, this session will help you remain compliant and avoid the common pitfalls that lead to delays and complaints. 

***

###### If you register to watch this webinar, your information will be used for the purpose of organising and communicating information about The DPO Centre Privacy Puzzle webinar series, which includes all the information provided in the registration sign-up form. We will also occasionally contact you about services and content that we feel are both relevant and of interest to you. 

###### *You can view The DPO Centre's Privacy notice *[*here*](https://www.dpocentre.com/privacy-notice/)*.*


THE DATA CHASE: DSAR compliance under the UK’s new data law 

According to McKinsey’s latest Global Survey on AI, over 75% of organisations are using AI in at least one business function. As AI reshapes business operations, many companies are appointing AI Officers to lead strategy, ethics, and risk management. Others are relying on their DPOs to manage oversight and guide responsible deployment. But who is best placed to govern the machines—a seasoned DPO or a dedicated AI Officer?  

Join David Smith, AI Sector Lead and DPO at The DPO Centre, Angelique Hamilton DPO at The DPO Centre Canada, Todd Daubert, Partner at Dentons, Washington DC, and James Robson, Data Protection Officer at The Labour Party, as they tackle some of the most pressing AI governance questions facing organisations today: 

*   Where do DPO responsibilities end and AI Officer duties begin? 
*   How do the different UK-EU-US regulatory approaches affect AI governance? 
*   What are the risks of misalignment between AI innovation and data protection obligations? 
*   Are organisations ready for AI at scale? 

Whether you’re exploring AI deployment, managing risk, or redefining what your data governance should look like, this is a must-attend webinar for leaders deciding who should really be minding the machines. 

***

###### If you register to watch this webinar, your information will be used for the purpose of organising and communicating information about The DPO Centre Privacy Puzzle webinar series, which includes all the information provided in the registration sign-up form. We will also occasionally contact you about services and content that we feel are both relevant and of interest to you. 

###### *You can view The DPO Centre's Privacy notice *[*here*](https://www.dpocentre.com/privacy-notice/)*.*


MINDING THE MACHINES: AI Officer vs DPO

CRM systems help drive sales and marketing, but balancing GDPR compliance requirements can be a challenge. Holding data for too long can lead to non-compliance, while deleting it too soon can cost valuable insights. Join data protection experts from The DPO Centre and industry leaders as they explore practical solutions for balancing compliance and business growth. If you manage CRM data, you won’t want to miss this session. 

***

###### If you register to watch this webinar, your information will be used for the purpose of organising and communicating information about The DPO Centre Privacy Puzzle webinar series, which includes all the information provided in the registration sign-up form. We will also occasionally contact you about services and content that we feel are both relevant and of interest to you. 

###### *You can view The DPO Centre's Privacy notice *[*here*](https://www.dpocentre.com/privacy-notice/)*.*


LET IT GO: CRM data retention and GDPR compliance

The Data (Use and Access) Bill has finally passed through Parliament and marks the first major reform to the UK GDPR since Brexit. But is this simply regulatory fine-tuning or the beginning of a new, more strategic shift in the UK’s approach to data governance?

Join data protection experts from The DPO Centre as they unpack what this legislative change is likely to mean in practice.

We’ll be discussing:

*   What the new ‘not materially lower’ standard for international data transfers could mean for EU adequacy
*   How the introduction of ‘recognised legitimate interests’ could simplify compliance and reshape assessments
*   Why the final compromise on AI and copyright could shape future policymaking and the governance of AI training


FROM GDPR TO DUA: Compliance reform or strategic pivot?

AI technologies are helping to streamline recruitment processes across multiple industry sectors. But what about the risks to data privacy and candidates’ rights? 

Join our DPO and AI sector lead, David Smith, and industry experts as they explore the technological and ethical implications of using AI in recruitment – its benefits, risks, and how to stay compliant with data protection laws and evolving AI regulations. 


 SMART HIRING OR BACKFIRING: Employing AI in recruitment

Do you want to ensure secure data transfers without compromising operational efficiency? Balancing business needs with legal requirements doesn’t need to be turbulent. During this webinar, you’ll learn how to navigate the complexities of data transfers across jurisdictions with varying data protection laws.


VALID PASSPORT REQUIRED: Business needs and legal requirements for cross-border data transfers

For clinical research and healthcare organisations, assurance is now a business-critical issue. Sponsors, CROs and trial partners are increasingly expected to evidence how privacy, security, and compliance are governed. This includes data protection under the EU and UK GDPR, US healthcare HIPAA requirements, and independent assurance through security controls such as SOC reports, and frameworks like HITRUST. 

Many teams still struggle to understand how these requirements fit together or the level of assurance regulators and stakeholders now expect. 

Join Ben Seretny, COO from The DPO Centre for a fireside chat with Lawrence Carter, DPO and Life Sciences Sector Lead, Pippa Scotcher specialist DPO, and assurance expert, Ian Terry from IS Partners. Together, they bring hands-on expertise supporting clinical research teams operating across jurisdictions.   

You’ll learn: 

*   How privacy compliance and assurance differ and why organisations need both 
*   What SOC reports, security controls, and healthcare frameworks like HITRUST demonstrate to regulators and stakeholders 
*   How UK and EU data protection regulations intersect with US healthcare requirements 
*   Practical ways DPOs, security and assurance teams can work together without slowing research 

This unmissable session brings together privacy and assurance specialists who will cut through the complexity and focus on what matters most for clinical research today. The discussion concludes with an open Q\&A session, giving attendees the chance to explore real-world challenges and leave with clearer priorities for strengthening assurance across clinical research operations. 


FULLY ASSURED: Getting privacy and assurance right in clinical trials

In recognition of International Women’s Day 2026, this session celebrates the women making an impact in compliance and data protection. As regulatory expectations rise and organisations place greater value on trust, governance and accountability, compliance roles are becoming an integral part of business success. 

Compliance careers are rarely linear. For many women, they are shaped by unexpected opportunities and career pivots. This discussion brings those stories to life, sharing how women have built meaningful careers in compliance, what they have learned along the journey, and why the profession continues to offer long-term, rewarding opportunities.  

Join Pippa Scotcher, DPO, Liz Griffiths DPO, and Caroline Burgess, DPSO, from The DPO Centre, alongside guest panelists for an open and practical discussion. Together, they bring a mix of in-house, consultancy, and sector-wide experience. They will share their personal career journeys, including the successes, the challenges and turning points that shaped their paths. 

You’ll learn: 

*   What can help women progress at different stages of their careers 
*   How varied backgrounds can shape success in compliance and data protection 
*   How to enter the profession today, including transferable skills and entry routes 
*   What day-to-day compliance roles look like 

 

The session will close with an open Q\&A, giving the audience the chance to ask questions and learn directly from the panel’s experiences. As we recognise the contribution women make across compliance and data protection, this is a great opportunity for anyone considering their next career step. 


CAREERS THAT COUNT: Women shaping compliance and data protection

Clinical trials teams are under increased pressure to manage data that needs to be shared during studies, reused beyond the original purpose where appropriate, and retained for decades. Yet traditional clinical trial datasets can become detached from real-world outcomes over time, and may fail to reflect important factors that were unknown when the protocol was finalised. 

Tokenisation is often positioned as the answer. It allows clinical trial data to be supplemented with real-world data (RWD), permits the participants to exercise dynamic and granular control over their participation, and grants sponsors the freedom to fine-tune data management over the lifetime of the trial.  

But tokenisation does not eliminate data protection risk. It raises practical questions about transparency, consent, and long-term governance. For sponsors and CROs, the challenge is understanding where tokenisation genuinely adds value, where it introduces new risk, and the extent to which these benefits and challenges may impact the full lifecycle of a trial. 

**In the DPO Centre’s latest Privacy Puzzle webinar, we bring this debate into focus** 

Join session moderator, Ben Seretny, COO, Lawrence Carter DPO and Life Sciences Sector Lead, Pippa Scotcher, DPO, alongside an expert panel. Drawing on deep experience in clinical trials, data protection, and health data governance, the panel will share real-world examples of the pros and cons of tokenisation and how these choices impact both regulatory compliance and trial outcomes. 

You’ll learn: 

*   How tokenisation fits alongside anonymisation and pseudonymisation, and how the EDPS vs SRB decision affects all three concepts in practice  
*   How tokenised datasets move the task of pseudonymisation from site to sponsor, and what that means for compliance and accountability 
*   The importance of explaining tokenisation clearly in informed consent forms, including how to address possible future secondary uses  
*   The data protection risks associated with selecting long-term third-party vendors, including negotiating contracts that may need to stand for 25 years or more 

This session will close with an open Q\&A giving you the opportunity to ask questions directly to the panel. If you’re responsible for trial data strategy or governance, this is a unique chance to learn from others facing the same challenges and understand whether tokenisation is right for your trials. 
