Event Summary
Data protection law has changed, and the pressure on Welsh organisations isn’t easing. The ICO’s final guidance on automated decision-making (ADM) is due later this year, with a statutory Code of Practice on AI and ADM to follow. The Data (Use and Access) Act 2025 is already changing the rules. The Welsh private and public sectors need to be ready for both.
Policy Insight Wales’ inaugural Data Protection Conference will bring together regulators, legal experts and Welsh practitioners from across the private and public sector to discuss what’s next for ensuring privacy and transparency in the age of AI.
Regulators are moving towards greater transparency on automated decisions. You will need to demonstrate what your systems decide and how, who checks them and how individuals can challenge the outcome. We will set out what the new ICO ADM guidance and Code mean in practice, and what to put in place before they arrive. We will share practical examples of when and how to conduct AI impact Assessments, manage risks of using different tools, suppliers and ensuring and organisation-wide understanding of your policies.
We will cover the evolving policy areas including the EU’s AI Act’s transparency obligations, the Smart Data 2035 Strategy and ICO guidance.
Spotlighting subject access requests, FOI and complaints handling, gain clear guidance on managing requests that involve sensitive data, deciding what to withhold, and explaining your decisions. We will explore how to handle commercially sensitive information, protecting legal privilege, managing requests that carry political sensitivity, and responding in a timely manner in line with the ICO’s expectations.
Throughout, the focus is on the realities of Welsh public and private services practice, including bilingual service duties and the way services are shared across organisations.
Join colleagues from across Wales to network with your peers, test your approach against current practice and leave with clear next steps.
Materials can be provided in Welsh. Email: [email protected]. Gallwn ddarparu deunyddiau yn Gymraeg. E-bost: [email protected]
Key Points
- Getting ahead of the ICO’s new ADM guidance and know what to change before the Code lands
- Build AI impact assessments that stand up to scrutiny
- Write privacy notices that work in both English and Welsh
- Share data across partners under WASPI without putting public trust at risk
- Clear the DSAR and FOI backlog including responding to AI generated requests,
- Use ADM in recruitment fairly, with a human in the loop
- Protect children’s data without slowing down services
- Ensuring transparency and accountability for agentic AI
- Leave with practical next steps and a network of Welsh peers to lean on
Sponsorship
Interested in sponsoring this event? Click here for sponsorship opportunities.
View all our conferences, events and training here.
Group discounts
Contact us for group rates.