Data protection seminar:

Prepare and protect your organisation 28 September 2016

The Law Society

CPD: 3 hrs CPD code: ZZZ/CELS

Data protection seminar:

prepare and protect your organisation

Programme

13:00 - 13:30 Registration and refreshments

13:30 - 13:35

Chair's welcome and opening remarks Chair: Peter Wright, managing director, DigitalLawUK and Council member and chair, Technology and Law Reference Group, The Law Society

13:35 - 13:55

Introduction: Implications of Brexit for the GDPR

How the GDPR will affect legal practitioners Speakers: Peter Wright, managing director, DigitalLawUK and Council member and chair, Technology and Law Reference Group, The Law Society Neil Brown, director, decoded:Legal and media board member of the Society for Computers and Law, and member of the Technology and Law Reference Group, The Law Society

13:55 - 14:25

Plenary 1: Obligations of data controllers and processors

Impact of the GDPR to those handling client data and those who determine why and how personal data are processed

Liability and quality controls to ensure data security and lawfulness of processing

Changes to outsourcing contracts

Changes to the requirements for obtaining consent

Rights of individuals Speaker: Tim Hickman, associate, White & Case

14:25 - 14:55

Plenary 2: The new role of the Data Protection Officer (DPO)

In which circumstances processors will now have to designate a DPO

New rules and responsibilities

Remote and on-site DPO Speaker: Raphaelle Conyard, privacy consultant, The Privacy Partnership

14:55 - 15:15 Refreshment break

15:15 - 15:45

Plenary 3: Cyber security and encryption

The use of encryption to send personal data

The use of secure communications software with clients

The use of social media and online tools for everyday communications. Speaker: Peter Wright, managing director, DigitalLawUK and Council member and chair, Technology and Law Reference Group, The Law Society

15:45 - 16:15 Pleanry 4: The ABC of mitigating and managing data breaches, from someone who has been there

Advance preparation: essential steps to take before a breach happens

Breach handling: what to do if a breach should happen, and pitfalls to avoid

Compliance: discharging your new mandatory breach reporting duties Speaker: Neil Brown, director, decoded:Legal and media board member of the Society for Computers and Law, and member of the Technology and Law Reference Group, The Law Society

16:15 - 16:45

Plenary 5: Data transfers outside of the EU

Current international negotiations relating to data transfers

How to safeguard your data and comply with the new regulation

Multi jurisdiction issues and recent cases Speaker: Dr Paolo Balboni, founding partner, ICT Legal Consulting and president, European Privacy Association

16:45 - 17:00

Interactive panel session with all speakers

17:00

Closing remarks

Join the discussion at #DataSeminar2016

Data protection seminar:

prepare and protect your organisation

Delegate list Correct as of 16/09/16

First name Surname Job title Organisation

Eilish Adams Solicitor and Partner The Law House

Caroline Allen Head of Legal and Democratic Services

West Yorkshire Combined Authority

Ruth Anderson Legal Counsel NCP Limited

Kathryn Baguley Legal Manager Vision Express

Dr Paolo Balboni Founding Partner ICT Legal Consulting

George Balmer Security Manager Satellite Applications Catapult Ltd

Alan Barnett Director Conway and Company Solicitors Ltd

Luigi Bernardis Partner - Solicitor B & M Law LLP

Helen Blundell Legal Services Manager Association of Personal Injury Lawyers Ltd

John Brooke Director Solicitor Brooke Gordon Solicitors

Neil Brown Director decoded:Legal

Aaron Campbell Company Secretary NCP Limited

Angela Carroll Solicitor Bonnetts Solicitors Limited

Oliver Charles Principal Oliver Charles Solicitor

Natasha Chell Partner Laura Devine Solicitors

Brendon Christian Group Head of Legal Marston Holdings

Dom Clulow Head of Infrastructure and Development

Vision Express

Raphaelle Conyard Privacy Consultant The Privacy Partnership

Jonathan Cook Director Cummings

Susan Cooper CEO Accutrainee Limited

First name Surname Job title Organisation

Matthew Davenport-Forde IT Administrator Laura Devine Solicitors

Manon Davies Administrator Cardiff University

Alan Dearsley Practice Manager Ellisons

Edward Dewhurst Principal Kesteven Partners Limited

John Dickerson Practice Director Anderson Rowntree

Luke Dixon Solicitor Greenberg Traurig LLP

Charles Drayson Director Drayson Law

Emma Dsouza Commercial Solicitor The Salvation Army

Rachael Edwards Compliance Assistant NjP Solicitors

Carly Fiander Partner Venters Solicitors

Joseph Finn Commercial Risk Manager Eversheds

Fiona Fleming Legal Practice Compliance Manager

Wilmer Hale

Trevor Francis Managing Partner Blackfords LLP

Davina Garrod Partner Akin Gump LLP

Nick Ginger Partner Machins Solicitors LLP

Ruth Gladwin Partner Ruth Gladwin Solicitor

Linda Goodwin Practice Manager Cooke Young & Keidan

Mark Goring Compliance Manager Igloo Law Limited

Alex Greenslade Chairman Leasehold Law LLP

Alison Griffin Office Administrator Cooke Young & Keidan LLP

Ian Hanahoe Contracts and Compliance Information Officer

University of Hertfordshire

John Hayes Principal Constantine Law Limited

Tim Hickman Associate White & Case

Nadine Howlett Assistant Solicitor BrookStreet des Roches LLP

First name Surname Job title Organisation

Lucy Hughes Risk and Compliance Withy King LLP

Julian Johnstone Partner Druces LLP

Craig Jones Partner and COLP Sullivan & Cromwell

Jayne Kendrick-Jones Client Care Manager Nockolds Solicitors

Dave Kenworthy IT Manager Machins Solicitors LLP

Kristina Kilner Head of Risk and Compliance

Forsters LLP

James Konidaris Senior Associate Squire Patton Boggs UK LLP

Barry Landa Practice Manager Knocker & Foskett

Claire Larbey Risk Director Eversheds

Nicola Libby Finance Director HB (Law) Ltd

Emma Linch Solicitor Simons Muirhead & Burton LLP

Tracie Linehan Office Manager Fairweathers Solicitors LLP

Daniel Macaluso Head of Law and Compliance

Linklaters LLP

Helen Martin Head of Compliance Policy LSL Property Services PLC

Liyen McCoy Director AndCo Law Ltd

Aidan McGuire Head of Legal Satellite Applications Catapult Ltd

Eileen McMahon Director McMahon Solicitors Limited

Alison Millar Partner Leigh Day

Pierre Montpeyroux MD Six Sigma Law Ltd

Natalie Moore Solicitor NjP Solicitors

Sam Narula Senior Partner Samuels LLP

Carol Nelthorpe-Cowne ICT Manager Dutton Gregory LLP

Omodele Olawwanle Principal Solicitor Del & Co Solicitors

Joanna Pacifico Director of Operations Byrne and Partners

First name Surname Job title Organisation

Roger Pittalis Partner Pittalis LLP

Sophie Poulter Legal Counsel CBS Interactive

Jemma Ralph Privacy Lawyer Slaughter and May

Catherine Rankin Quality and Compliance Manager

Cripps LLP

Sara Rees Technical and Quality Adviser

Medical Protection

Howard Ricklow Partner Collyer Bristow LLP

Hannah Rigby General Counsel Excalibur Bidco Limited (Wowcher)

Kitty Rosser Associate Birketts

Stefano Ruis Solicitor and Partner Hickman and Rose

David Sanders Risk Advisor TLT LLP

David Schollenberger Partner Healys LLP

Monica Shah IT and Promotions Manager

MT UK Solicitors

Stephen Shotnes Partner Simons Muirhead & Burton LLP

Daniel Smith HR Director Pitmans LLP

Fiona Spinks Client Care Manager Nockolds Solicitors

Sarah Staines Principal Touchstone Legal Services

Sandra Steele Assistant Legal Director CMA

Phil Stocker Business Excellence Manager

Porter Dodson LLP

Sean Stuttaford Chief Operating Officer Thompson Smith and Puxon

Terence Symon Professional Conduct Solicitor

CIPFA

Vanessa Taebi Solicitor

Petra Taylor Solicitor The Open University

Hamza Majid Tramboo Paralegal MT UK Solicitors

Maurice Tunney IT Director Keystone Law

First name Surname Job title Organisation

Karen Wallis Head of Conveyancing Patrick Lawrence Solicitors

James Ward Compliance Manager Thomson Snell & Passmore LLP

Kathleen Wells Principal Wells Solicitors

Michael White Chief Technical Officer Cubism Ltd

Joanna Williams Partner Compliance Director

Wollen Michelmore

Felicity Williams Solicitor Knocker & Foskett

Robert Wilson Partner Peachey & Co LLP

Peter Wright Managing Director DigitalLawUK

Data protection seminar:

prepare and protect your organisation

Speaker biographies

In alphabetical order

Dr Paolo Balboni, founding partner, ICT Legal Consulting and president, European Privacy Association Paolo Balboni Ph.D. is a top tier European ICT, privacy and data protection lawyer and serves as data protection officer for multinational companies. Lead auditor BS ISO/IEC 27001:2013 (IRCA Certified). Dr Balboni (qualified lawyer admitted to the Milan Bar) is a founding partner of ICT Legal Consulting, a law firm with offices in Milan, Bologna, Rome, an international desk in Amsterdam, and multiple partner law firms around the world. He is the co-chair of the CSA Privacy Level Agreement Working Group, president of the European Privacy Association based in Brussels and the cloud computing sector director and responsible for foreign ffairs at the Italian Institute for Privacy based in Rome.

Neil Brown, director, decoded:Legal and media board member of the Society for Computers and Law, and member of the Technology and Law Reference Group, The Law Society Neil is a solicitor and managing director of decoded:Legal, a specialist English law firm advising internet, telecoms, technology and healthcare start-ups and businesses. Neil has spent years helping design products and operate internet and communications services. Clients love his practical advice, informed by a broad technical understanding and years of experience in commercial environments. He has considerable experience in privacy and data protection, as well as expertise in cyber security and in handling law enforcement demands imposed on communications companies.

Raphaelle Conyard, privacy consultant, The Privacy Partnership Raphaelle began her career in privacy at Masons (now Pinsent Masons) as a paralegal in 2000. After a spell at HBOS, Raphaelle joined Centrica in 2003 as senior data protection officer responsible for corporate centre. Raphaelle’s focus shifted to British Gas customer data privacy compliance in 2008. Raphaelle was made head of privacy in 2012 and qualified as a solicitor in 2014. In July 2016, Raphaelle moved into privacy consultancy working for the Privacy Partnership. Raphaelle has experience in running privacy compliance programmes, advising on large commercial deals and shaping customer database solutions.

Tim Hickman, associate, White & Case Tim is an associate in the London office of White & Case LLP, specialising in UK and EU privacy and data protection law. Tim has a wide range of experience in privacy and data protection from general compliance issues (such as implementing privacy policies and consent forms) to advice on more specialised issues (such as managing data breaches, structuring cross-border data transfers, performing data enrichment, and complying with the 'right to be forgotten'). Tim has a detailed knowledge of data protection case law, and is closely familiar with the new General Data Protection Regulation.

Peter Wright, managing director, DigitalLawUK and Council member and chair, Technology and Law Reference Group, The Law Society Peter is a solicitor and managing director at DigitalLawUK, the only law firm in the UK specialising solely in cyber security, data protection, freedom of information and social media law. DigitalLawUK has an association with International Legal Consulting and has clients across the UK, Europe and North America. Peter has spoken at a range of conferences including the British Legal Technology Forum, the London Law Expo, Legalex, the Cloud Law Conference and the European Legal Cyber Security Forum as well as at numerous events for the Law Society. Peter is the Law Society Council member for Yorkshire and is also chair of the Law Society's Technology and Law Reference Group at Chancery Lane. He is also author of the Law Society's Cyber Security Toolkit and hosts the DigitalLawUK podcast.

Speaker presentations

Introduction: Implications of Brexit for the GDPR

Plenary 1: Obligations of data controllers and

processors

Plenary 2: The new role of the Data Protection Officer

(DPO)

Plenary 3: Cyber security and encryption

Plenary 4: The ABC of mitigating and managing data breaches, from someone who

has been there

Plenary 5: Data transfers outside of the EU