Program DPO Forum Luxembourg December 2025

Coffee and welcome breakfast

CNPD -Power Point 

« Protecting People, Empowering Innovation: The Regulator's Vision for AI»

  • The transformative impact of Artificial Intelligence on society and the economy.
  • Regulation as a foundation, not a barrier - enabling responsible innovation.
  • The CNPD's dual mission: protect individuals and provide legal clarity for businesses.
  • The supervisory authority's role to guide, support, and enforce compliance.
  • Building a digital future where trust, rights, and innovation coexist within clear and fair rules.

Tine A. Larsen- Presidente of CNPD

Speaker: Jérôme de Mercey (COO & Co-founder of Dastra)

Conference title: Digital Omnibus: what should DPOs expect?

The draft «Digital Omnibus» regulation reshuffles the cards of European digital compliance. Between simplification of the RGPD, convergence with the AI Act and the Data Act, a new breach notification regime and harmonization of DPIA models, this text will transform the daily lives of DPOs.

This session offers a clear and operational deciphering of the main developments: personal data, people's rights, cookies, cybersecurity, AI... and the concrete actions to anticipate now to prepare your organization for this new framework.

A must-attend conference to understand the real impact of the Omnibus and stay one step ahead.

The draft European «Digital Omnibus» regulation reshuffles the cards of digital compliance. Between simplification of the RGPD, convergence with the AI Act and the Data Act, a new breach notification regime and harmonization of DPIA models, this text will transform the daily lives of DPOs.

This session offers a clear and operational deciphering of the main developments: personal data, people's rights, cookies, cybersecurity, AI... and the concrete actions to anticipate now to prepare your organization for this new framework.

Speaker: Julien Winkin (CEO Luxgap)

Luxgap Power Point

Conference title: “NIS2, RGPD and AI: combining compliance, security and innovation without curbing growth».»

Between NIS2, RGPD and the AI Act, companies are looking for the balance between compliance, innovation and performance. This conference shows how to unite DPO and CISO functions to simultaneously manage security, governance and responsible AI, without curbing growth. A pragmatic approach, based on business continuity and collaboration, to turn constraints into competitive leverage.

Michael Hofmann (APDL President)

«Al - lifecycle impact on privacy»

AI in GDPR remains challenging, models evolve fast and practical applications are evolving exponentially in business settings.

It is therefore difficult for many to keep up with the evolution of AI models while balancing risks with always increasing efficiency gains.

However, companies have possibilities to use methodologies and tools to navigate a reasonable save AI lifecycle journey

Speaker: NASSOY Stéphane (DPO)

Lusis Power Point

Conference title: The DPO in the age of Artificial Intelligence: a changing profession

This conference will explore the radical transformation of the role of Délégué à la Protection des

Data in the face of the emergence of AI in organizations.

The traditional DPO, focused on legal and administrative compliance with the RGPD, must

now master complex technical issues.

AI systems (machine learning, predictive algorithms, LLM) introduce new risks

:

- opaque decision-making,

- discriminatory bias,

- re-identification of anonymized data, and

- hallucinations revealing training data.

AI systematically triggers the most demanding RGPD mechanisms:

- mandatory Impact analyses (art. 35),

- strict supervision of automated decisions (art. 22),

- reinforced guarantees for the exercise of rights.

The DPO becomes a permanent player in the validation of innovation projects.

Moderator: Fabrice Hecquet (CEO CyberXpert)

Omnibus Regulation: Should we anticipate the coming changes?

 

  • Real impacts: what are the concrete consequences for companies and citizens?
  • The beneficiaries: who will really benefit from these changes?
  • Regulatory simplification: is it really necessary or just a pretext?