GDPR: What's next?

Understanding GDPR

Shalini Kurapati, CIPP/E

Co-founder and CEO, Clearbox AI

The digital single market

• Digital sovereignty. Standards for data, technology, and infrastructure
• Reform of ePrivacy Regulation for electronic communications
• Digital Services Act- safe and accountable online platforms
• Digital Markets Act- fair and open access to digital markets
• AI Act- GDPR style regulation for AI

The AI act

• Risk-based approach, accountability- consolidated in 2023
• Types of AI systems, definitions, risk-benefit analysis for AI model choice
• GDPR-like enforcement and fines

¹ European Commission

The global GDPR influence

• European but a global scope
• Adequacy decisions
• GDPR-inspired laws:
  • California (USA): California Consumer Privacy Act or CCPA
  • Virginia: Virginia Consumer Data Protection Act or VCDPA
  • Brazil: Lei Geral de Proteção de Dados Pessoais or LGPD

Future ready

• Regulations balance innovation risks and individual rights
• Risk-based approach, responsible innovation
• Economic growth together with democratic and ethical values
• Not perfect, continuously evolving
• By design thinking and state-of-the-art measures

Let's practice!

Understanding GDPR