Event Summary

Chaired by the Scottish Government, join data privacy and information governance professionals at Holyrood Insight’s third annual Data Protection in Scotland Conference in Edinburgh.

As we enter the final phases of DUAA implementation and looking ahead to new regulatory expectations for 2026/2027, this informative, timely conference will examine the changing data protection landscape and what it means for organisations across Scotland.

You’ll gain expert guidance and best practice, tailored to the Scottish context, to help you to ensure organisational readiness in a rapidly evolving regulatory environment.

Hear directly from the regulator, with an update from Jenny Brotchie of the Information Commissioner’s Office – on regulatory priorities, expectations, and upcoming guidance.

We will share best practice guidance to help you to help you map your cross-border data flows, and address the growing complexity of complaint handling, DSARs, and ADM controls.

For organisations seeking to grow through marketing, research, and innovation, we will unpack the latest developments in data privacy – including digital identity, biometrics, research access, legitimate interests, PECR, cookie use

A key focus of the day will be information governance in the age of AI. Through case studies and expert insights, we will explore how to develop and deploy AI systems responsibly, ensuring outputs are transparent, explainable, and aligned with regulatory expectations. With Scotland’s forthcoming AI Strategy for 2026–2031, deepen your understanding of emerging AI risks and opportunities. With a reworked ADM regime under the DUAA, we will provide guidance on using AI and automated decision-making lawfully and ethically.

Put your questions to a legal expert in a dedicated session on the future regulatory environment. We will cover the impact of the FOI Reform (Scotland) Bill, and the UK Cyber Security and Resilience Bill. We will explore the implications of the EU AI Act , and the EU’s Digital Omnibus initiative for organisations operating across EU markets.

Don’t miss this unique, one-day event – attend to gain a comprehensive update on DUAA, and upcoming Scottish, UK, and EU legislation. Identify clear priorities for your organisation, and leave equipped with the knowledge and confidence to comply with the latest regulations.

Key Outcomes

  • DUAA – complying with confidence, understanding ICO priorities and their expanded enforcement powers
  • New guidance on automated decision-making, special category data, Data Subject Access Requests (DSARs), and complaintsADM in recruitment decisions
  • Embedding a culture of data protection that supports both compliance and innovation
  • International transfers and compliance – NIS2 Directive, EU AI Act and The EU Digital Omnibus
  • Ensuring your privacy policies and impact assessments reflect DUAA changes
  • The UK Cyber Security and Resilience Bill– key implications for organisations
  • Marketing practices – cookie consent, new ‘recognised’ legitimate interests, and the soft opt-in for charities
  • Data sharing and research access in Scotland
  • The governance of AI, biometrics and digital identity

Venue

In-person: this conference will take place at the COSLA Conference Centre, Haymarket Yards, Edinburgh. Attend this full-day event to network, build relationships and learn from your peers.

Sponsorship

Interested in sponsoring this event? Click here for sponsorship opportunities.

View all our conferences, events and training here.

Group discounts

Contact us for group rates.