Annual Privacy Forum 2025 - 22-23 October 2025, Frankfurt a.M., Germany

Co-located Event

Proceedings 2025

Organisers

Supporters

Draft Programme (subject to change)

Day 1 - Wednesday, October 22^nd, 2025
08:00 – 09:00	Registration - Welcome Coffee
09:00 – 10:00	Opening Remarks and Keynote Moderator: Kai Rannenberg	Speakers Ulrich Schielein, Goethe University Frankfurt Fabienne Tegeler, ENISA Wojciech Wiewiórowski, European Data Protection Supervisor Luca Tagliaretti, European Cybersecurity Competence Centre
10:00 - 11:00	Panel Session I: Digital Sovereignty Moderator: Meiko Jensen	Panelists Marit Hansen, ULD Jaap-Henk Hoepman, Radboud University & Karlstad University Robert Riemann, EU OS Project Lead & Vrije Universiteit Brussel (VUB) Ina Schiering, Ostfalia University of Applied Sciences
11:00 – 11:30	Coffee Break
11:30 - 12:30	Paper Session I	Chair: Michael Friedewald Interfacing Human Brains: What could go wrong? Marta Beltran Turning to Online Forums for Legal Information: A Case Study of GDPR’s Legitimate Interests Lin Kyi, Cristiana Santos, Sushil Ammanaghatta Shivakumar, Franziska Roesner and Asia Biega
12:30 – 14:00	Lunch Break
14:00 - 15:00	Invited Talk Moderator: Kai Rannenberg	Privacy Litigation as Private Enforcement – Theory vs. Reality Thomas Bindl (EuGD), Christian Däuble (Spirit Legal)
15:00 – 16:00	Paper Session II	Chair: Nils Gruschka Simple now, Complex later: The Questionable Efficacy of Diluting GDPR Article 30(5) Harshvardhan J. Pandit “I will never pay for this” Perceptions of fairness and factors affecting behaviour on ‘pay-or-ok’ models Victor Morel, Farzaneh Karegar and Cristiana Santos
16:00 – 16:30	Coffee Break
16:30 – 17:00	Paper Session III	Chair: Liina Kamm Illuminating the DPIA Blackbox – A Survey of Data Protection Impact Assessment Practices in Organisations Malte Hansen, Greta Runge, Nils Gruschka and Meiko Jensen
17:15 - 18:15	Panel Session II: Communities in Privacy and Data Protection Moderator: Petros Efstathopoulos	Panelists Michael Friedewald, Fraunhofer ISI & Plattform Privatheit Kai Rannenberg, Goethe University Frankfurt Stefan Schiffner, Bonn Rhein Sieg University of Applied Sciences Prokopios Drogkaris, ENISA
18:30	Social Event

Day 2 - Thursday, October 23^rd, 2025
08:30 – 09:00	Registration - Welcome Coffee
09:00 - 09:45	Invited Talk Moderator: Narges Arastouei	Data Protection and Cybersecurity – Friends or Foes? Jens Bender (Federal Commissioner for Data Protection and Freedom of Information, Germany)
09:45 - 10:45	Panel Session III: The experience from EUDPR and the challenges ahead Moderator: Massimo Attoresi	Panelists Laura Nuñez Barez, CEPOL Prokopios Drogkaris, ENISA Gloria Folguera Ventura, EUIPO Roberta Maggio, ERCEA DPO
10:45 - 11:15	Coffee Break
11:15 – 12:15	Paper Session IV	Chair: Ina Schiering Anonymity-washing Szilvia Lestyán, William Letrone, Ludovica Robustelli and Gergely Biczók Information Inference Diagrams: Complementing Privacy and Security Analyses Beyond Data Flows Sebastian Rehms, Stefan Köpsell, Verena Klös and Florian Tschorsch
12:15 – 13:15	Lunch Break
13:15 - 14:00	Invited Talk Moderator: Kai Rannenberg	State of play GDPR – A supervisory perspective Meike Kamp (Berlin Commissioner for Data Protection and Freedom of Information)
14:00 – 15:00	Paper Session V:	Chair: Stefan Schiffner “Abort the login”: Understanding Phishing Susceptibility through Warning Design in the Context of 2FA Agnieszka Kitkowska, Jorina Freya Gerken, Zhaoying Wang and Bruce Ferwerda Expert Strategies to Assist Laypeople in Making Decisions and Adopting Privacy-Enhancing Technologies Shirin Shams, Sebastian Jakob Schillinger and Delphine Reinhardt
15:00 - 15:30	Coffee Break
15:30 - 16:30	Keynote Moderator: Meiko Jensen	On principles, non-functional properties and technical experiments – Building solid techno-legal bridges in Privacy Engineering Frank Pallas (Paris Lodron University of Salzburg)
16:30 – 17:00	APF 2025 Closing Remarks

Please note that all times and sessions are indicative and may change on short notice!