1-4 December, Brussels, Belgium

The 3rd Data Protection High-Level Exchange and Learning Week, jointly crafted by the SIGMA Programme, Regional Cooperation Council (RCC), ReSPA, and GIZ Georgia, once again confirms the strength of regional cooperation and the growing relevance of data protection in an era of rapid technological transformation. The event was held in partnership with the European Commission, gathering participants at the premises of DG Justice, the European Data Protection Board (EDPB), and the European Data Protection Supervisor (EDPS).

This year’s edition offered an exceptional platform for experts and institutions from the Western Balkans and the Eastern Partnership to meet, exchange experiences, and learn directly from Europe’s leading authorities in data protection and emerging technologies.

The programme opened at DG Justice, where participants engaged in a discussion on international data flows facilitated by Anne Schilmoller, Head of Sector for International Affairs and Data Flows. The dialogue shed light on current EU initiatives, global challenges, and the evolving regulatory environment.

At the EDPB premises, participants took part in a unique, hands-on workshop titled “Creating Your Own Algorithm”, led by Gwendal Le Grand. Additionally, Dilletta Di Cicco provided an update on EDPB activities related to artificial intelligence, emphasising the growing importance of responsible and transparent deployment of AI. Participants learned about machine learning and its effect on data protection through a practical exercise from Jonathan Ellen from the Dutch Data Protection Authority.

A full day at the EDPS provided an in-depth view into the supervisory authority’s practices. Acting European Data Protection Supervisor Secretary General Thomas Zerdick welcomed participants, setting the tone for productive and forward-looking discussions.

The EDPS team presented its Guidance for co-legislators, with Nikša Stolić offering key insights into supporting high-quality legislative drafting. This set the stage for a rich exchange featuring presentations from delegations across the Western Balkans, including: Besa Velaj & Blerta Nerguti (Albania), Silvije Fučec and Marijana Sentić (Bosnia and Herzegovina), Slobodanka Slavkovska & Valentin Fetadjokoski (North Macedonia), Milan Marinović and Sanja Unković (Serbia), contribution during investigations deep dive Lumnije Demi and Nerimane Dragusha Bryma (Kosovo*) - Best practices in advising the legislator and Maja Mitrovic Žunjic and Marija Perazić, who contributed to discussions on selected topics

These exchanges highlighted the concrete progress made in strengthening institutional capacities and aligning national legislation with EU data-protection standards. The open discussions and tour-de-table format fostered honest dialogue on challenges, needs, and opportunities for further alignment.

Sessions dedicated to technology monitoring, led by Massimo Attoresi and Xabier Lareo, explored EDPS strategies for anticipating and assessing trends that impact privacy and digital rights.

A particularly insightful part of the programme was the deep dive into investigations, including an EDPS case study on the use of Microsoft 365 by the European Commission (Snežana Srdić) and an overview of supervisory activities in the law enforcement ecosystem (Joanna Parkin).

The week concluded with a strong focus on artificial intelligence, featuring presentations by Manuel Garcia Sanchez, on EDPS’ new supervisory role under the EU AI Act and Kristian Bartholin, Council of Europe, on the organisation’s AI-related initiatives

These contributions underscored the importance of preparing institutions for the complex interplay between data protection and AI governance.

The event once again proved to be a unique regional forum, connecting:

• top-level EU data-protection institutions (EDPB, EDPS, DG Justice),
• regional organisations (ReSPA, RCC, SIGMA, GIZ),
• and national authorities from the Western Balkans and Eastern Partnership.

Jelisaveta Tasev, ReSPA Programme Manager, underlined that “such exchanges are crucial for building resilient, modern, and future-oriented data-protection frameworks, especially as AI, cross-border data flows, and digital transformation continue redefining the work of supervisory authorities.”

The week in Brussels strengthened professional networks, deepened regional and EU cooperation, and equipped institutions with practical knowledge and tools to advance data protection in line with European standards.