The Annual Privacy Forum (APF) 2026 has officially opened its call for papers, inviting researchers, policymakers, industry experts, and students to contribute to one of Europe’s leading events on privacy and data protection. The conference will take place on 9–10 September 2026 in Salzburg, Austria, jointly hosted by the University of Salzburg and Goethe University Frankfurt. As usual, CEPIS is a partner of the event.
Taking place a decade after the adoption of the General Data Protection Regulation (GDPR), APF 2026 aims to examine how privacy norms are evolving in the face of rapid technological change. With artificial intelligence, complex digital platforms, and data‑driven business models reshaping global practices, this year’s forum calls for a renewed dialogue on the future of data protection. Organisers emphasise the need for interdisciplinary approaches bridging law, engineering, economics, ethics, and real‑world implementation.
Submissions are invited across four broad themes:
• Law, Policy, and Strategy – including GDPR enforcement, the EU Data Strategy, data intermediaries, and certification.
• Engineering and Technology – featuring PETs, privacy-by-design, generative AI, IoT, and digital identity.
• Society, Users, and Ethics – addressing human factors, dark patterns, transparency, and vulnerable groups.
• Implementations and Case Studies – focusing on DPIAs, privacy risk management, and applied privacy engineering.
APF 2026 accepts full papers, short papers, and student papers, encouraging contributions from both established experts and emerging voices in the field. All papers will undergo thorough peer review, and accepted contributions will be published in the Springer LNCS proceedings. Selected authors will also be invited to submit extended versions to a special issue of the Privacy Studies Journal.
Key deadlines include 1 April 2026 for abstract submission and 10 April 2026 for full papers. Submissions must be made via EasyChair at:
https://easychair.org/conferences/?conf=apf2026
APF 2026 aims to provide an essential forum for shaping privacy’s next decade—one defined by technological acceleration, societal transformation, and renewed regulatory ambition.
