6-9 May | Batumi – Georgia

SPRING CONFERENCE 2025

33rd European Conference of Data protection Authories

Alongside our thoughtfully designed agenda focusing on data protection, Batumi serves as an inspiring setting for our conference. Situated on the scenic Black Sea coast, this lively city combines a rich cultural heritage with a forward-looking spirit. From wandering through its historic streets and enjoying the lively Batumi Boulevard to tasting the exquisite flavors of Georgian cuisine or exploring the city’s modern innovations, Batumi promises a memorable and invigorating experience for all attendees.

Welcome Letter from the President of the Personal Data Protection Service of Georgia

Dear Members and Observers of the Conference,

Dear Colleagues,

Personal Data Protection Service of Georgia is honored to host the 33rd European Conference of Data Protection Authorities in the seaside town of Batumi. We are excited to offer you an opportunity to explore the rich culture, history, and natural beauty of our country, while providing a collaborative environment and an outstanding experience. We strive to facilitate insightful discussions, exchange best practices, host engaging session and provide exclusive networking opportunities.

As we live in a data-driven age where the protection of human rights and freedoms is of utmost importance, I truly believe that data protection authorities stand united in dealing with the existing challenges. In the era of increased technological progress, our mission is to raise the culture of personal data protection and uphold the rights of data subjects. Data protection authorities play a crucial role in this. So, we eagerly anticipate your contribution to the Conference and interesting discussions on the panels.

Our Service strongly prioritizes enhancing international cooperation through platforms that allow the sharing of practical knowledge and the best European practices. To this end, our authority has deepened international partnerships with several counterpart European data protection authorities and obtained observer status to the European Data Protection Board. Georgian data protection authority is committed to strengthening and protecting common European values. Thus, on the path of European integration, we are honoured to host one of the prestigious conferences in the field of data protection and privacy.

Finally, I use this opportunity to extend my warmest invitation and personally welcome each and every one of you to the beautiful city of Batumi.

Dr. Dr. Lela Janashvili

President of the Personal Data Protection Service of Georgia
Associate Professor at Ivane Javakhishvili Tbilisi State University
Associate Professor at the Autonomous University of Barcelona

Panel Description:

The panel will examine how evolving AI regulations impact data protection frameworks at national, European, and international levels. It will explore the convergence of data protection and AI, the interplay between the EU AI Act’s risk-based approach, national data protection laws, and the Council of Europe’s Framework Convention, focusing on how these regulatory instruments shape privacy safeguards in AI-driven environments. As part of the topics, the panel will also consider the impact of data protection law on the tech ecosystem. The panel will address how to foster innovation while protecting human rights, democracy, and the rule of law. The discussion will also highlight the ongoing challenges, the role of data protection authorities in upholding the rights to privacy and data protection in AI development and deployment.

Panel Description:

The panel will focus on children’s privacy and data protection, considering the technological progression and an AI-driven environment. The discussion will explore the emerging challenges of children’s data protection, the impact of new technologies on children’s privacy, and the ethical implications of AI in children’s digital spaces. The panel will examine how AI-driven platforms, educational tools, and entertainment services collect and process children’s personal data. It will address the role of data protection laws in safeguarding children’s rights to ensure a safe and privacy-respecting online environment for young users.

Panel Description:

The panel will discuss the complexities of protecting health data amid rapid technological advancements and an evolving regulatory environment. The discussion will explore how cross-border data flows challenge existing privacy frameworks, raising concerns about data security, and data subjects’ rights. Additionally, it will address the roles of data protection authorities, healthcare providers, and technology companies in ensuring responsible data use while promoting innovation in the healthcare sector.

Event description:

Side event will provide an overview of the Georgia’s latest efforts in strengthening data protection. The session will cover key legislative changes, including the implementation of the new Law of Georgia on Personal Data Protection and its impact on public and private sector entities. Attendees will gain insights on the Service’s recent activities, highlighting major initiatives, awareness-raising efforts, and international cooperation in the field. Additionally, the event will present significant cases and decisions made by the Service, showcasing its role in shaping Georgian data protection landscape.

Panel Description:

The panel will discuss the role of DPOs and privacy professionals in promoting a privacy-first culture in light of emerging regulatory frameworks, technological advancements, and evolving risks. The discussion will emphasize how AI, cross-border data flows, and sector-specific regulations are reshaping privacy governance. Additionally, the panel will address the perspectives of the data protection authorities on current challenges faced by DPOs and privacy professionals, as well as the skills and expertise needed to stay current in these roles.

Panel Description:

The panel will discuss the challenges of the smaller data protection authorities when handling complex, high-profile cases involving powerful global entities. It will explore strategies for overcoming resource constraints. The panel will highlight the experience and approaches of the data protection authorities to handle a large volume of complaints and address large-scale privacy violations despite limited recources. The panellists will share their expertise on how smaller data protection authorities uphold data protection principles and hold major players accountable in an increasingly data-driven world.

Panel Description:

The panel will discuss the role of global collaboration in enhancing privacy awareness and education. It will examine how data protection authorities, international organizations, and industry stakeholders can work together to raise public awareness to navigate complex privacy challenges. The discussion will highlight the importance of knowledge-sharing, joint collaborative initiatives, and coordinated public awareness campaigns in fostering a culture of data protection. It will also address how international cooperation between data protection authorities can promote best practices and uphold strong data protection and privacy standards in an increasingly interconnected digital world.

-Adoption of Resolution

-Presentation of annual report of the Steering Group of the Spring Conference

-Presentation from the host of the European Case Handling Workshop (ECHW) 2024

-European Case Handling Workshop (ECHW) 2025

-Spring Conference 2026

Event description:

The APDCAT side event at the 2025 Spring Conference will focus on the impact of AI on fundamental rights. The assessment of this impact is a key component of the AI Act and several other regulatory proposals, and bridges data protection (DPIA/PIA) and the risk-based approach to AI. Moving from provisions establishing this obligation to concrete solutions to operationalise this assessment is crucial in this area, as is streamlining the Fundamental Rights Impact Assessment (FRIA) by developing model templates that combine rigorous risk assessment and management practices with the fundamental rights legal framework. Based on an approach centred on participatory design, involving private and public entities, the APDCAT has developed a FRIA model template that can be used both by AI providers and AI deployers to assess the impact on fundamental rights in the design and development of their AI solutions. The side event will present this model and the use cases that have already implemented it in four key areas of high-risk AI applications.

Panel Description:

The panel will discuss the intersections between legal compliance and ethical responsibility in the development and deployment of AI systems. It will further examine existing regulations setting legal requirements for AI use.

Panel Description:

The panel will delve into the critical role of Privacy-Enhancing Technologies (PETs) in facilitating secure, privacy-compliant data exchanges across borders, while addressing the growing demand for advanced AI solutions. It will also focus on PETs in smart cities, alongside the regulatory and technical challenges of implementing PETs at scale.

Conference tagline: “A person's most valuable treasure is their identity” —
Ilia Chavchavadze (1899)

Google maps

SPRING CONFERENCE 2025

1 Rustaveli Ave, Batumi, Georgia