Program Sikkerhetsfestivalen 2026

Legal & Compliance

Employer Oversight Meets Neural Insight: Business Case, Risks and Governance

Onsdag 11- Breiseth, Storlon

EnglishHigh-level 40 min

Tereza Duchoňová

Tereza Duchoňová

Data Privacy Specialist

Tereza works as a Data Privacy Specialist at Norsk Hydro. She has a broad knowledge of EU law within the areas of cybersecurity, data protection and artificial intelligence. She previously worked as a research assistant at the Norwegian Research Center for Computers and Law (University of Oslo) under the aegis of the VIROS project analysing challenges associated with the regulation of artificial intelligence, focusing on its implications for data protection.

Neurotechnology and AI are entering the workplace. Sensors embedded in helmets and headsets can measure brain activity to detect fatigue, attention levels, or stress. In the Health, Safety and Environment ('HSE') sector, this promises clear benefits: fewer accidents and injuries. Such innovation could, quite literally, save lives.

However, the same neural signals that are used to protect employees can also expose them. What if the signals reveal information about employees' mental health or simply reveal that they are not trying hard enough? When neural signals become workplace metrics, the line between safety enhancement and workplace surveillance begins to blur.

While the GDPR and Labour Laws, such as the Norwegian Working Environment Act, set guardrails against intrusions into employees’ (mental) privacy, the AI Act introduces a risk-based framework for governing the use of AI. This presentation examines the privacy challenges that this technology presents, taking into account the particular nature of employment relationships. Furthermore, it analyses the technology's classification and corresponding obligations under the AI Act.

  1. When freedom is at stake - from Ukraine's frontline to Norwegian preparedness 5 · Kulturhuset Banken, Festsalen
  2. Hack Faster Than You Deploy: Integrating Continuous Penetration Testing into the SDLC. 1 · Frimurerlosjen, rom 1
  3. WSL: Nice for developers, even nicer for red teamers 1 · Frimurerlosjen, rom 2
  4. CI/CD: The Most Privileged System in Your Cloud 10 · HeartBox, Byscenen
  5. Pirates Of The North Sea 2 · Home hotel Hammer, moen nede
  6. Fra styrerom til sikkerhetsvakt: Den røde tråden fra risikostyring og compliance til operativ sikker 2 · Home hotel Hammer, moen oppe
  7. Innsidere og spionasje 3 · Hvelvet, Gullsalen
  8. Supply Chain Security - Protecting your business - End to End 4 · Kommunestyresalen, Lillehammer rådhus
  9. Hva gjør vi for de små ? 5 · Kulturhuset Banken, Expedisjon
  10. Kriseledelse i blindebukk – strategi og jus når skjermene går i svart 5 · Kulturhuset Banken, Holbøsalen
  11. verdivurdering2025_final_v4_ENDELIG.xlsx 6 · Lillehammer kino, sal 2
  12. Det er ikke deg, det er systemet! HOP som nøkkelen til robust cybersikkerhet 6 · Lillehammer kino, sal 4
  13. Exposing a cybercrime network 9 · Victoria Scandic, sal 1+2
  14. Hvordan overleve en pentest 9 · Victoria Scandic, sal 3
  15. UPN Gone Wrong: Breaking Identity Security in Azure & Entra ID 5 · Kulturhuset Banken, Expedisjon
  16. Passord: trusselmodell, beskyttelse og hvorfor kompleksitet betyr noe 5 · Kulturhuset Banken, Expedisjon