[Music]
good morning to everyone what an amazing
audience you're right Peter the eye appt
every year so I'm happy to be with you
this morning to say a few words about
the future of data protection in Europe
we are and Peter Helsing just said it in
a critical period the GDP or has been
adopted and we have less than 18 month
to be ready may 2018 the countdown has
started for you and the new compliance
obligations that you will have and for
us DPS that we need to finalize a new
governance model issue guidance to
controllers and processors in order to
have a full harmonization so there is
clearly a lot of work and efforts in
front of us but I want to start by
saying that this is worth it because the
GDP our answers to the new needs and
trends we collectively have to pace
first it answers to the confidence
crisis that has emerged since the last
three years of course following the
Snowden revelations but more generally
confidence crisis of the consumers of
the individuals of the people's i would
say around the relationship they have
with you business representatives as
regard their data people are more and
more enabled to understand the complex
and fast evolving ecosystem they feel
they could be used by it and not in a
position to make their own choices they
want to be reassured the GDP our answers
to that by putting the individuals
at the center of the regulation in
particular by reinforcing their rights
or by recognizing new rights they like
the right to data portability but also
it answers through the new compliance
efforts that will be asked to you
compliance is no longer a pure legal and
sometimes let's say theoretical issue it
enters the business processes themselves
p I a GPO privacy by design and by
default a complex set of tools at your
disposal to manage your compliance in a
dynamic way obviously it will be more
demanding than in the past but again I
think it's a profitable investment it is
a profitable investment because in fact
a smart accountability system
transformed transforms conformity into a
competitive advantage it is a question
of reputation of consumer trust of
market values it also a way to diminish
the risk in terms of sanctions so it is
in your business interest to comply all
the DPAs want to help you to adapt to
this new environment for that we want to
clarify as much as possible the
obligations of the gdp are and sometimes
let's be honest the GDP are is a little
bit complex so the Working Party 29 is
working hard for the production of an
operational toolbox which we hope will
be user-friendly and will help you to
ensure compliance with the GDP are six
working groups and task forces have been
constituted and they are in action an
old EP a European DPA are committed and
we have adopted an action plan for this
year defining our first priorities and
in particular on four subjects on which
we want to issue guidelines for you
controllers and processors for
priorities the notion of high risk and
the data protection impact assessment
this is a new tool certification the
portability right I just mentioned and
the DPO let me insist on two of these
subjects the DPO they are several DPO in
the room I'm sure the why is it
important for us because we believe the
DPO is a kind of Chef darkest of the
tool box his role will be or her role
will be critical for the accountability
so the working body 29 wants to support
this function data portability because
it's a key leve to help individuals be
covering their sovereignty over the data
and rebalancing the asymmetrical
relationship between him and her and the
companies using the data data
portability is also important because it
offers avenues for innovation and new
services around the data on these two
subjects we will finalize the guidelines
of the Working Party 29 in December at
our plenary on the two other subject we
will publish guidelines in 2017 of
course besides guidelines to the
controllers and to the processors
another priority for us is to establish
our new governance model concretely what
is the new governance model it is
concretely how DPA are going to work
together on issues of common interest
and they are growing issues of common
interest between us DPS governance
European DPS governance has been
criticized in the past too heavy too
slow not harmonized between the
different european countries now we want
to be imaginative in line with the
very decentralized nature of the
internet but also efficient coping with
the need of global actors the GDP are
provides a very sophisticated system of
cooperation between DPS with four levels
of cooperation virtual assistant joint
operation etc we are currently in the
process of preparing all type of tools
necessary to make this cooperation
mechanism ready for 2018 from filling
forms to flow charts or step-by-step
procedures we also have to set the LDP
be last layer of our governance
governance model the EDP be European
data protection board will be a new
European body it will be responsible to
arbitrate disputes between the national
authorities and also to develop a
European doctrine this LD PB is a major
step forward in Europe it gives the
ability of the European data protection
community really to speak with one voice
on operational cases and on substantial
issues it will give a robust identity to
the privacy community in Europe we are
currently at the Working Party 29 level
developing all the procedures relating
to the creation and the functioning of
the LDP be in cooperation with the OD PS
that will provide the Secretariat of the
LDP be ladies and gentlemen you realize
this morning that the GDP are is in fact
a major cultural and operational changes
change in Europe under this new legal
framework DPS will have the ability to
express a common idea the shared vision
in Europe and to strengthen the European
sovereignity but at the same time we DPA
we don't want our community to be closed
and it will be my last my first final
remark we want to be open
to the outside of Europe and to create
interest inter ability all the more as
the GDP our has extra territorial reach
there for the working party 29 has
started to develop a closer
collaboration with our international
counterparts in particular recently with
a per the network of Asian Pacific
privacy authority in Singapore and later
this month we will meet in Mexico in the
past we have already been in close
contact with APEC members we will also
probably organized a meeting in May
around one of the meetings of the oecd
meeting in Paris without asian-pacific
colleagues in order to exchange on the
future gdp on my second final remark
will be to say that the DPAs won't be
able to succeed with the GDP are without
you as I said first we are in the same
boat in front of this huge effort so we
need your input as we organized in July
the first Fablab to discuss the 2016
priorities with EU representative from
the industry and from the civil society
and this fab lab went very well we need
to repeat the exercise for the next year
so I invite you again to contact the
presidency of the Working Party 29 team
and give information on what you think
is important is essential to discuss
within the Working Party 29 and what you
believe is needed to make this GDP are
more practical I'm convinced that we
must develop our guidelines with your
participation and I'm waiting for your
thoughts for the next year of the
Working Party 29 priority thank you to
all of you