Annual Privacy Forum 2026 Call for Papers September 9-10, Salzburg, Austria https://privacyforum.eu/ Abstract submission: April 1st, 2026 (23:59 AoE) Submission of full papers: April 10th, 2026 (23:59 AoE) Submission page: https://easychair.org/conferences/?conf=apf2026 =========================================================== Ten years after the adoption of the General Data Protection Regulation (GDPR), this EU legal framework together with the technical developments remains the global point of reference for empowering individuals and ensuring a high-level of protection in terms of privacy. However, the challenges of the next decade look very different from the last. Rapid advances in artificial intelligence, data-driven business models and governmental practices, and complex digital services are testing the limits of established privacy norms in Europe and beyond. APF 2026 invites the community to contribute to the understanding of what is at stake, where new threats originate, and how law, technology, and practice can be integrated to address current and imminent challenges. Against this background, the University of Salzburg and Goethe University Frankfurt jointly organize the Annual Privacy Forum (APF) 2026 in Salzburg, Austria. For the APF 2026, we invite papers presenting original work on the themes of data protection and privacy and their repercussions on technology, business, government, law, society, policy and law enforcement. An interdisciplinary approach is highly encouraged to contribute to bridging the gap between research, business models and policy. Topics of interest particularly include: Law, Policy, and Strategy * Ten Years of GDPR: Enforcement challenges and future reform * Privacy and data protection in the EU Data Strategy (Data Act, DGA, DSA) and the AI Act * Data intermediaries and data custodianship * Economics of privacy and personal data * Data protection policies, certification, and auditing Engineering and Technology * State of the art in privacy and data protection engineering * Data Protection by Design and by Default * Anonymisation and pseudonymisation techniques * Real-world applications of privacy-enhancing technologies (PETs) * Privacy in Generative AI, LLMs, and Federated Learning * Privacy in IoT and mobile networks (5G, 6G, and beyond) * EU Digital Identity Wallets and applications * Empirical assessment of privacy technologies and architectures under real-world regulatory constraints Society, Users, and Ethics * Human factors of privacy and security (usability, nudging, dark patterns, etc.) * Consent management and data subject rights * Transparency, intervenability, and unlinkability * Trust management and accountability * Data protection for vulnerable groups Implementations and Case Studies * Real-world aspects or case studies of privacy management * Privacy risk management and impact assessments (DPIA, FRIA, etc.) * Real-world implementations of innovative “by design” technologies * Personal data breaches *Important Dates:* * Abstract submission: April 1st, 2026 (23:59 AoE) * Submission of full papers: April 10th, 2026 (23:59 AoE) * Notification to authors: May 22nd, 2026 * Camera-ready copies: June 12th, 2026 * Conference Dates: September 9-10, 2026 *Paper Categories* APF 2026 seeks original contributions from researchers and academia, policy makers and implementers, data protection authorities, industry, consultants, NGOs, as well as civil society. All papers need to be genuine in content and should not overlap with work published elsewhere. Full Papers (up to 8,000 words) Research or Opinion Papers. Full research papers need to be genuine in content and should not overlap with work published elsewhere. Opinion papers are expected to reflect the views of the author(s). Student Papers (up to 4,000 words) In order to encourage participation of young researchers, the submission of student papers is particularly encouraged. These papers will be treated as thoroughly as full papers, but can be shorter (up to 4000 words, excluding bibliography and appendices) and reflect novel thinking that might not have been fully elaborated just yet. Short Papers (up to 4,000 words) In addition to student papers, short papers are also invited, as this call is open to anyone who has a sketch of an idea, an opinion, or a call for collaboration. *Submission & Review Process* Submissions of original work must be done via easychair: https://easychair.org/conferences/?conf=apf2026 Papers must not overlap substantially with work already published or simultaneously submitted to a journal or another venue with published proceedings. Submissions must be drafted in English and need to comply with the Springer LNCS style guide (https://www.springer.com/gp/computer-science/lncs/conference-proceedings-gui...). Within the submitted manuscript, authors are advised to note below the title whether their submission is a research/opinion paper, a student paper, or a short paper. *Note on AI:* APF allows the usage of AI-based systems for improving language and grammar issues, but not for content generation. The use of AI tools must be declared explicitly within the submission. All submissions will be thoroughly reviewed by our PC members. We aim for a minimum of 3 reviews per paper (except in cases of clear desk rejection). Authors must submit their papers according to the conditions and within the deadlines indicated above *Publication* Proceedings will be published by Springer LNCS. Further to APF 2026 Springer LNCS proceedings, selected papers will be invited to submit an extended version of the manuscript to a special issue of the Privacy Studies Journal. Note: An extended version can be published in a journal when it includes at least 30% new material, cites the original publication, and includes an explicit statement about the increment. The details for the submission to the Privacy Studies Journal and the review process will be communicated to the invited authors as part of the invitation. -- Univ.-Prof. Dr.-Ing. Frank Pallas EXDIGIT Professor of Privacy Engineering and Policy-Aligned Systems (PEPSys) Paris Lodron University of Salzburg, Austria Faculty of Digital and Analytical Sciences +43 664 88663239 frank.pallas@plus.ac.at Prof. Dr. Kai RannenbergKai.Rannenberg@m-chair.de Chair of Mobile Business & Multilateral Security Goethe University Frankfurt Theodor-W.-Adorno-Platz 4 Phone: +49-69-798-34701 60629 Frankfurt/Main, Germany WWW:www.m-chair.de PGP key onwww.m-chair.de/personal/pgp/Kai_Rannenberg.pgp