Conference Programme
The APF program comprises consciously curated invited talks and keynotes by outstanding authority representatives, practitioners, researchers and other privacy stakeholders, complemented by presentations of scientific papers carefully selected by the PC and one legislation-oriented panel. Of the selected scientific papers, the program foresees 30 minutes for full and 20 minutes for short papers.
Together, these contributions provide comprehensive and multifaceted perspectives to this year’s theme “Ten Years of GDPR – Engineering the Future”. Contributions originate from – inter alia – law, technology, and social sciences, together stipulating the unique inter- and transdisciplinary exchange and discourse that APF is specifically known for.
The program is continuously being refined and completed, particularly with updated talk titles.
Opening Event
On the evening of September 8 – thus closing the traditional pre-APF IPEN event organized by the European Data Protection Supervisor, and at the same time welcoming all APF participants – the city of Salzburg and state of Salzburg jointly invite to a fine classical concert in the stunning marble hall (“Marmorsaal”) of Mirabell Castle. Drinks and small snacks will presumably be available to buy before the concert.
- When: September 8, 18:00 – 19:00
- Where: Mirabell Castle, Marmorsaal
- How to get there: Organized walk from conference location or individual arrival
- Sponsored by: City of Salzburg and state of Salzburg
Day 1 - Wednesday, 9 September 2026
| Time | Slot Type | Speaker(s) / Title | Chair / Moderator |
|---|---|---|---|
| 08:00-09:00 | Registration - Welcome Coffee | ||
| 09:00-10:00 | Opening Remarks and Keynote | APF 2026: Ten Years of the GDPR - Engineering the Future | Frank Pallas |
| 10:00-11:00 | Paper Session I | Transparency and Intervenability in Privacy Engineering: From Research Gap to GDPR Challenge (30 min) | Nils Gruschka |
| Relativizing the Notion of Personal Data: A Proposed Framework for Data Sharing (30 min) | |||
| 11:00-11:30 | Coffee Break | ||
| 11:30-12:30 | Keynote | Helmut Leopoldtbc | Michael Friedewald |
| 12:30-13:30 | Lunch Break | ||
| 13:30-14:15 | Invited Talk | Matthias SchmidlRoles and competences of data protection authorities under the AI Act | Nicola Leschke |
| 14:15-15:45 | Paper Session II | Secure and Explainable Inference with Neural Networks (30 min) | Stefan Schiffner |
| Personal Data Accuracy Is a Blind Spot in LLM Privacy Research Opinion paper (30 min) | |||
| Understanding Differential Privacy in Terms of Crowd Size Preservation (30 min) | |||
| 15:45-16:10 | Coffee Break | ||
| 16:10-17:30 | Paper Session III | The Web Tracking Score: A GDPR-Aligned Metric to Benchmark Privacy and Data Protection (30 min) | Ina Schiering |
| Designing Privacy-Preserving Smart Home Intrusion Detection Through User Acceptance Criteria: An Action Design Research Study (30 min) | |||
| Models in the Dark: Rectification and Erasure under GDPR in ML Supply Chains Short paper (20 min) | |||
| 17:30-18:15 | Invited Talk | Marit HansenSecurity by Design and the GDPR - pretty much best friends? | Kai Rannenberg |
| 18:15 | Social Event | Guided city tour and DuckDuckGo-sponsored conference dinner |
Day 2 - Thursday, 10 September 2026
| Time | Slot Type | Speaker(s) / Title | Chair / Moderator |
|---|---|---|---|
| 08:30-09:00 | Welcome Coffee | ||
| 09:00-10:00 | Paper Session IV | Enforcement, Market Distortion, and the Danger of Reforming Fundamental Rights Under Pressure (30 min) | Massimo Attoresi |
| A History of GDPR Cookie Banner Compliance: The Roles of Publishers, Regulators and CMPs (30 min) | |||
| 10:00-11:00 | Keynote | Max Schremstbc | Marit Hansen |
| 11:00-11:30 | Coffee Break | ||
| 11:30-12:30 | Panel | Facilitating breach and incident reporting | Prokopios Drogkaris |
| 12:30-13:30 | Lunch Break | ||
| 13:30-14:30 | Invited Talks | Konstantinos Limniotis, Teresa Martinez Secure Processing Environments: Joint report from the Hellenic and Spanish Data Protection Authorities | Narges Arastouei |
| Jan Schallaböck ISO/IEC JTC 1/SC 44 Consumer protection in the field of privacy by design | |||
| 14:30-15:30 | Paper Session V | A Rights-First Path to Privacy by Architecture: Proposed Article 88b GDPR and the Case for Advanced Data Protection Control (ADPC) Opinion paper (30 min) | Malte Hansen |
| Informed Consent by Design: Developer-Oriented Privacy Best Practices for GDPR Compliant mHealth Applications (30 min) | |||
| 15:30-16:00 | Coffee Break | ||
| 16:00-16:30 | Invited Talk | Irene Kamaratbc | Meiko Jensen |
| 16:30-17:00 | Closing Remarks | Closing Session. Announcing 2027; Best Paper Award | Frank Pallas |
Social Programme
In addition to the technical program, APF 2026 also comprises agenda items dedicated to celebrating Salzburg’s rich and world-renowned cultural heritage, socializing, and networking in mind-stimulating environments:
- 08.09. Opening Event: 6PM Classical Concert (see above)
- 09.09. Social Event: 6:15PM guided tour (sponsored by Salzburg Convention Bureau) through the city center to the conference dinner location, followed by the DuckDuckGo-sponsored APF conference dinner at 7:15PM in the PitterKeller, Rainerstraße 6, Salzburg.