Skip to Main Content
Our Commitment to Diversity

IAPP Data Protection Intensive France, Hosted by IAPP

3rd Party Hosted Event
Date: 14 March 2023
Time: 8:00 AM ET
Location: Le Meridien Etoile, 81 Boulevard Gouvion Saint-Cyr, Paris, 75848 Cedex 17, 75017

Data Protection Intensive (DPI) France is the annual conference hold by the International Association for Privacy Professionals (IAPP) in Paris. The event held this year on 14 and 15 March at Le Meridien Etoile will gather simultaneous English and French panels presentations focusing on international topics, policy and strategy in the personal data protection field. 

Claude-Etienne Armingaud will be holding a panel "Codes of Conduct — GDPR’s Prodigal Son Finally Arriving?"

"Codes of conduct overseen by accredited monitoring bodies are one of the breakthrough innovations introduced by EU General Data Protection Regulation. As part of its accountability framework, GDPR not only shifted the onus of demonstrative compliance, but also created the possibility for stakeholders to engage in co-regulatory practices. The goal was to allow the industry to support regulatory implementation by developing workable guidance to concretize the GDPR’s provisions. More flexible than other previously adopted compliance tools, CoCs generated high expectations, particularly in the wake of ‘Schrems II’, as a possible solution to address international data transfers and enable legal foreseeability. CoCs have not yet reached their full potential, with only a handful of national CoCs deployed and even less at the pan-European level. However, as the cloud ecosystem leads the way, this panel will explore the background of this sectoral success while highlighting CoC’s enefits, as well as their limitations.

Camille Scarparo will be presenting on the DPO's role under GDPR: "DPO Lone Rider or Orchestra Leader."

The objective of this panel is to highlight the difficulties that a DPO may face in the exercise of his/her mission and the means to overcome them. The problems encountered may be (i) internal: resources, influence in the decision-making process, independence, relations with members of the management and (ii) external: management of requests to exercise the rights of data subjects and communication with data protection authorities. The objective is to discuss the key elements that allow the DPO to fully participate in the compliance of his structure, both from the point of view of the regulator, the company and a law firm.

  • IAPP
Return to top of page

Email Disclaimer

We welcome your email, but please understand that if you are not already a client of K&L Gates LLP, we cannot represent you until we confirm that doing so would not create a conflict of interest and is otherwise consistent with the policies of our firm. Accordingly, please do not include any confidential information until we verify that the firm is in a position to represent you and our engagement is confirmed in a letter. Prior to that time, there is no assurance that information you send us will be maintained as confidential. Thank you for your consideration.

Accept Cancel