Helen Dixon, Ireland’s Data Protection Commissioner, gave the keynote speech during the closing session of the International Association of Privacy Professionals’ Data Protection Congress in Brussels.

Here are a few of the key takeaways.

• No jurisdiction has all the answers to the challenges posed by the complex digital environment. We need to learn.
• Ubiquitous is an insufficient word to describe the importance of personal data in our lives.
• All or us in data protection need to be forthright about calling out the consequences of GDPR that are detrimental to people.
• Courts in other jurisdictions are not inclined to give remedies for de minimis damages.
• The expansionist application of GDPR can be balanced by looking again at the priorities of GDPR and reallocating resources of supervisory authorities.