CLBR #269: Countdown to GDPR

Countdown to GDPR with
the Future of Privacy Forum’s Gabriela Zanfir-Fortuna

The effective date of the new EU General Data Protection Regulation is May 25, 2018 — only 275 days away.

See separate post: European Union General Data Protection Regulation Backgrounder

In this interview we will discuss the following:

  • Changes – What is Personal Data
  • Changes – Scope (not limited to EU)
  • Changes – Consent
  • New Consumer Rights – e.g. “the right
    to be forgotten”, and a right of “data portability”
    in certain circumstances.
  • Impact on Profiling
  • Privacy by Default
  • Documentation Requirements
  • When do you need a DPO?
  • Increased Penalties


Gabriela Zanfir-Fortuna (@gabrielazanfir)

Future of Privacy Forum 

Gabriela’s blog – pdpEcho: All about personal data protection and privacy

Gabriela holds a Ph.D. in law with a thesis on the rights of the data subject from the perspective of their adjudication in civil law, and an LLM in Human Rights (University of Craiova). Currently, she is a Fellow of the Future of Privacy Forum, a Washington DC based think-tank, contributing with EU data protection law expertise to the Research Coordinating Network initiative, under a grant of the National Science Foundation. Gabriela also provides EU data protection expertise to multinational companies as Subject Matter Expert for GDPR compliance projects, working with Navigant Consulting as Associate Director for the Legal Technology Solutions Practice.

Before moving to the US, Gabriela worked for the European Data Protection Supervisor in Brussels, dealing both with enforcement (compliance) and policy matters. At the EDPS she worked in Cooperation and International Relations, dealing among other issues with international data transfers, participating to the work of the Article 29 Working Party. Gabriela received the Junior Scholar Award in 2014 at the Computers, Privacy and Data Protection (CPDP) Conference in Brussels for her work on the right to be forgotten. She is the first Romanian author to publish a comprehensive volume on the rights of the data subjects (“Protectia datelor personale. Drepturile persoanei vizate”, C.H. Beck, Bucharest, 2015). She published extensively on privacy and data protection in international journals and collective volumes.

Future of Privacy Forum (@futureofprivacy)

Future of Privacy Forum blog

The Future of Privacy Forum (FPF) is a non-profit organization that serves as a catalyst for privacy leadership and scholarship, advancing principled data practices in support of emerging technologies.  FPF brings together industry, academics, consumer advocates,
and other thought leaders to explore the challenges posed by technological innovation and develop privacy protections, ethical norms and workable business practices.




These are stories that may form the basis of future shows or relate.




Webinar: Representing Victims of Cyber Exploitation

Tuesday, August 29, 2017, 12 noon – 1 p.m. Pacific

Presented by the Technology, Internet and Privacy Interest Group.
This program offers 1 hour participatory MCLE credit.


Revenge porn is a growing problem on the internet, and 38 states and the District of Columbia have passed laws banning it. This webinar will review the state of the law on revenge porn and challenges presented in representing victims.

Speakers: Erica Johnstone and Bennet Kelley