Helen Dixon, Ireland’s Data Protection Commissioner, gave the keynote speech during the closing session of the International Association of Privacy Professionals’ Data Protection Congress in Brussels.

Here are a few of the key takeaways.

  • No jurisdiction has all the answers to the challenges posed by the complex digital environment. We need to learn.
  • Ubiquitous is an insufficient word to describe the importance of personal data in our lives.
  • All or us in data protection need to be forthright about calling out the consequences of GDPR that are detrimental to people.
  • Courts in other jurisdictions are not inclined to give remedies for de minimis damages.
  • The expansionist application of GDPR can be balanced by looking again at the priorities of GDPR and reallocating resources of supervisory authorities.