Tutorial Paper -- Don't Tell Them now (or at all) - End User Notification Duties under GDPR and NIS Directive -- Selected Student Papers -- Ethical Principles for Designing Responsible Offensive Cyber Security Training -- Longitudinal collection and analysis of mobile phone data with local differential privacy -- Privacy-preserving IDS for In-Car-Networks with Local Differential Privacy -- Strong customer authentication in online payments under GDPR and PSD2: a case of cumulative application -- Privacy in Payment in the Age of Central Bank Digital Currency -- Analysing drivers' preferences for privacy enhancing car-to-car communication systems -- Learning Analytics and Privacy - Respecting Privacy in Digital Learning Scenarios -- Preserving Privacy in Caller ID Applications -- "Identity management by design" with a technical Mediator under the GDPR -- Open about the open-rate? State of email tracking in marketing emails and its effects on user's privacy -- Privacy Respecting Data Sharing and Communication in mHealth: A Case Study -- Privacy-preserving Analytics for Data Markets using MPC -- Towards models for privacy preservation in the face of metadata exploitation.