The workshops introduced Europe’s data protection framework, incl. Council of Europe Convention 108+ and GDPR, and discussed the future data protection framework and the potential challenged with establishing national data protection regulation. The sessions focused on building a clear understanding of roles, responsibilities and core principles of data protection, including lawful processing, data subject rights and accountability while highlighting the operational and reputational risks of non-compliance. These foundations were complemented by a practical group work, where participants learned to use the “four Ws”: mapped data flows (the “what”), identified legal bases for processing (the “why”), defined retention rules (the “when”) and explored internal workflows for handling data and audit third party service providers (the “who”).

Across the week, discussions increasingly focused on implementation: applying the “four Ws” to real organisational contexts, strengthening transparency through privacy notices and embedding “privacy by design” alongside cybersecurity measures such as access controls and incident response protocols. The sessions also emphasised organisational readiness, including the designation of data protection leads and staff training, laying the groundwork for long-term integration of data protection practices across sectors.

The lead body on Fiji’s side for the data protection framework and co-organiser is the Ministry of Policing and Communications.  Director-General, Ms. Tupou Baravilala delivered the opening remarks along with the Deputy Head of Delegation Mr. Nereo Penalver-Garcia from the Delegation of the European Union to the Pacific, Anastasia Gadja from the Council of Europe through the GLACY-e project and Lauri Aasmann from EU CyberNet. The sessions were led by experts Patrick Walshe and Tihomir Katulić, respectively from the Council of Europe’s and EU CyberNet.

Sessions gathered a wide community of stakeholders from Fiji, including financial, telecommunications, tourism, health and public sector officials, policymakers and cybersecurity professionals, NGOs, CSOs and academia. The sessions were organised in cooperation with the Ministry of Policing and Communications of Fiji, the European Union Delegation to the Pacific and the Council of Europe through the GLACY-e project.

Photos: https://www.flickr.com/photos/eucybernet/albums/72177720332706443/