At the upcoming ETIS Data Privacy Task Force meeting, hosted at Hrvatski Telekom's headquarters in Zagreb, DPOs and privacy professionals from telecom operators and providers across the ETIS community will come together for two days of in-depth discussions and knowledge-sharing.


This event is a unique opportunity for peers to meet in a supportive environment, tackling shared challenges around the Data Act, AI risk assessments, GDPR, sustainability, and marketing practices (detailed agenda can be found below).


The meeting will include a mix of interactive roundtables and presentations were all participants are encouraged to prepare and actively participate. We aim for an open exchange where telecom privacy experts can share real-world insights, learn from one another, and bring fresh ideas back to their teams. It's a space to connect with like-minded professionals, explore the evolving landscape of data privacy, and work together toward practical solutions that benefit both our industry and our customers.


In addition to the discussions, participants will enjoy an evening city tour and dinner aimed to foster the community spirit outside of the meeting room.


Recommended Accommodation:

  • Our top recommendation is the Hilton Garden Inn Zagreb, conveniently located in the same in the same building where the meeting will place. The rate is approximately €100 room/night for one guest, including breakfast. Note that rates may slightly fluctuate so the mentioned price cannot be guaranteed.
  • Rates - Hilton Garden Inn Zagreb - Radnicka
  • For a more budget-friendly option, consider Hotel Slisko, which is also located near the meeting venue. The rate is approximately €85 per night for one guest, including breakfast. Again, please note that rates may vary slightly.
  • https://www.slisko.hr/en/

Logistics and other important information:

  • Costs: Please note that while the event is free to attend, accommodation and travel costs will be covered by each participant's company. Recommendations for accommodations will be also soon provided.
  • Weather: The average daytime temperature ranges from 1°C to 5°C, while night time lows can drop to around -3°C to -5°C. Snowfall and frost are common, so it's advisable to dress warmly.
  • Registration: To confirm your participation, please complete your registration using the button above. If you intend to attend but are awaiting internal approvals please already register and let us know of the situation in the comments section. This will help us accurately track attendees and ensure the meeting proceeds as scheduled.
  • Group Participation: If your organization plans to send more than two experts please let us know. We want to prioritize operator diversity and ensure sufficient space for all participants.
  • Agenda and preparation: The draft agenda is available below. Please expect small changes As our meeting flourish through mutual knowledge, each participant is expected to contribute to the sessions where they have insights.
  • Confidentiality: By attending the meeting, you agree to adhere to the ETIS confidentiality guidelines (available in the documents section below).

For any inquiries regarding the meeting, feel free to reach out to Ruxandra Cioban (rc@etis.org). We are here to assist with any questions or concerns you may have.


We look forward to seeing you in Zagreb for a meaningful dialogue shaping the future of privacy in telecom.

Agenda

09

45

-

10

00

Meeting up in the main lobby of Hrvatski's Telekom's HQ

You can enter the building through the main entrance near the T-Shop, where there’s a reception. We’ll have a registration spot nearby, and the reception staff will guide you to the meeting room, which is just a few meters away.

10

00

-

10

45

Welcome and Introductions

Opening from the CEO, followed by an overview of the two-day program, and a roundtable of introductions involving all participants. Any last-minute adjustments to the agenda can be made to ensure all priorities are addressed.

10

45

-

11

15

11

15

-

13

00

Session I: The Data Act – Implications, Compliance, and Data Security for Telecoms

The Data Act is a pivotal piece of legislation aimed at fostering innovation and competition in the digital economy by ensuring the availability and reusability of data. For telecom industries, this act presents both opportunities and challenges.

The discussion will delve into how the Data Act impacts data sharing practices, the balance between data privacy and accessibility, and the implications for data-driven business models. We will explore in more detail the regulatory landscape, compliance requirements, and the strategic importance of interpreting the act correctly to leverage data assets while adhering to European legal standards.

Additionally, the session will highlight the critical role of robust data security measures in supporting compliance and responsible data management. Insights into planning, audits, and monitoring practices will provide participants with actionable tools to safeguard data integrity while aligning with the act’s requirements.

The session will feature approx. 45 minutes of expert presentations exploring national approaches, implementation strategies, and best practices; and approx. 45 minutes of interactive discussions offering participants a platform to exchange ideas, identify shared challenges, and explore collaborative solutions.

Presentations:
- DT's Approach to the Data Act: Understanding and Implementation in Germany (Presenter: Susanne Eichhorn, Deutsche Telekom)
- Best Practices for Implementing Robust Data Security Measures: Planning, Audits, and Monitoring (Presenter: Danica Arsova-Taleva, Makedonski Telekom)

By attending this session, participants will gain actionable insights into the regulatory landscape, compliance strategies, and practical steps to adapt to and capitalize on the Data Act.

13

00

-

14

00

14

00

-

15

30

Session II: AI Update – Implementing Compliance Measures for the AI Act and GDPR

The AI Act introduces groundbreaking regulations to ensure artificial intelligence systems are developed and deployed responsibly, ethically, and in compliance with strict legal standards. This session will explore how telecom organizations are adapting to these requirements through robust compliance measures.

Dedicated presentations will address key themes, including identifying and mitigating risks in AI data processing, conducting risk assessments, implementing GDPR principles like transparency and accountability, and aligning with regulatory expectations. The session will conclude with an open discussion where participants can engage with real-world questionnaires shared by a telecom company and analyze how they were interpreted to meet the expectations of data protection authorities.

Presentations:
- Risks and Best Practices in Data Processing for AI (by Peter Vigh - T-Mobile Czech Republic and Jan Golais - Slovak Telekom)
- AI Risk Assessment & Compliance (by Ursula Ocenasek and Paul Graf-Nowak, A1 Austria)
- Navigating AI Compliance: The Intersection of AI and GDPR (by Lucia Pitonakova, Deutsche Telekom Cloud Services)
- GDPR Compliance for AI Solutions: Expectations from Data Protection Authorities (by Ana Matković Čorda, Infobip)

15

30

-

16

00

17

00

-

18

15

Rest Break

Participants can use this time to refresh and rest, especially if they are staying at the recommended hotels near the meeting location.

18

15

-

19

00

Sightseeing Bus Ride

We will meet up in the main lobby, from where we will head towards the tram station where we will enjoy a special, guided ride, leading us to the dinner place.

10

00

-

11

30

Session III: Sustainability and the GDPR requirement

In an era where sustainability and data privacy are paramount, telecom companies face the dual challenge of meeting GDPR requirements while advancing their sustainability goals. This roundtable discussion invites participants to share their strategies and best practices for handling these critical issues.

Topics include the integration of sustainable practices into data management processes, ensuring GDPR compliance in eco-friendly initiatives, and balancing environmental responsibilities with data protection obligations. Participants are to exchange insights on sustainable data storage solutions, energy-efficient technologies, and the implementation of privacy-by-design principles.

This collaborative session aims to foster an open dialogue on overcoming the complexities of aligning sustainability efforts with stringent data privacy regulations, ultimately striving for a more responsible and compliant telecom industry.

This session will include a few dedicated presentations followed by open discussions among participants to share insights on balancing GDPR with sustainability, including challenges, innovative solutions, and best practices.

Presentations:
- Balancing Green Innovation and GDPR Compliance (by Dora Lovreković & Tea Biško, Hrvatski Telekom)
- Human Rights aspect of Sustainability and the GDPR (by Dario Casella, Ericsson)

11

30

-

12

00

12

00

-

13

00

Session IV: Marketing activities: Consents, Cookies, Pay or Okay (part 1)

Navigating the complexities of digital marketing in the telecom industry requires a clear understanding of consent management, particularly regarding cookies and the "Pay or Okay" model.

This session will explore the duration and validity of user consents under current regulations.
Key discussions should include best practices for obtaining and renewing user consent, the legal implications of consent expiration, and how to ensure transparency and compliance in marketing strategies.

Participants will examine the lifecycle of consent, from initial collection to periodic renewals, and discuss the technical and legal mechanisms to manage user preferences effectively. The goal is to provide telecom companies with actionable insights into maintaining valid consents, enhancing user trust, and optimizing marketing activities within the regulatory framework.

This session will consist of a few presentations (one hour), followed by an open discussion (one hour).

Presentations:
- DTs global project of consent banner harmonization (by Susanne Eichhorn, Deutsche Telekom)
- Consents, Cookie Banners and the Pay-or-Okay Model (by Marija Bošnjak and Igor Špoljar, Hrvatski Telekom)

13

00

-

14

00

15

00

-

16

00

Wrap-up Session

The closing session will feature a recap of key takeaways and a discussion of future topics to be covered in upcoming online activities and the next in-person meeting, scheduled for June 5–6 in Athens. Participants are also encouraged to share their feedback on the meeting to support our continuous improvement efforts.

Sponsors and Partners

Organizer

Partner