Blog · PURPOSE AND MEANS

Blog

Latest insights on data protection, AI governance, and GRC leadership.

19 Mar 2026 · 4 min read

Déjà Vu at the Office: Why yesterday's sourcing strategy is today's AI survival guide

The recent wave of layoffs across major Danish companies is a loud wake-up call.

16 Mar 2026 · 6 min read

LinkedIn's blocking fail: technical glitch or safety incident?

When key safety mechanisms fail, the burden shifts to the most vulnerable users.

12 Mar 2026 · 4 min read

Piecing together your team's work practices, brick by brick

Sometimes, the most complex data protection or GRC challenges are best solved not by traditional meetings but by building models of our reality.

9 Mar 2026 · 4 min read

Beyond legal #20: Getting real with harms

Notes from the FTC’s latest conference about informational harms highlighting why data protection is a complex economic, societal, and product design issue that is far too critical to be left solely to the legal department.

2 Mar 2026 · 4 min read

The myth of the CEO’s surveillance dashboard

Workplace surveillance is rarely a simple top-down pyramid, but a recursive trap where "Dataism" judges the C-suite and the true "ultimate dashboard" sits not in the boardroom, but with the IT administrators.

26 Feb 2026 · 6 min read

Beyond legal # 19: The Chrome-ification of education and the algorithmic classroom

Triggered by the recent Danish regulatory ruling against the use of Google in schools, "Googleization of education" is not just a legal compliance issue, but a key societal challenge that commodifies children's data, threatens their rights and freedoms, and erodes traditional teacher autonomy in favour of algorithmic standardisation.

20 Feb 2026 · 9 min read

Beyond legal #18: data separation as a design strategy

We often fear the single eye of 'Big Brother,' but a real threat to our fundamental rights is the architectural loss of data separation, which is allowing the distinct, partial gazes of the 'Oligopticon' to merge into a 360-degree Panopticon.

13 Feb 2026 · 5 min read

Beyond legal #17: Planting other trees in the forest

Whether you are a business leader trying to decouple from high-risk vendors, or a consumer trying to protect your family's digital footprint, the strategy is the same. We must stop looking only at the shiny leaves of the apps we use and start understanding the roots. Our mindset needs to be switched to "risk reduction."

23 Jan 2026 · 8 min read

Beyond legal #16: GRC leaders - your chance to shine

Having a calm head, getting the right people to use methodical approaches and truly understanding the types of risk we are talking about has never been more important in this day and age.

9 Jan 2026 · 4 min read

Avoid the ivory tower: Hub-and-Spoke AI governance without exhausting your local colleagues

AI governance is about to be stress-tested by agentic systems, and the companies that hold up won’t be the most centralised, they’ll be the ones that embed oversight locally without burning out their champions.

6 Jan 2026 · 5 min read

15 posts into “Beyond Legal”: what's been covered so far

Fifteen posts in, Beyond Legal has explored why effective data protection (and AI governance) is less about legal interpretation and more about building real organisational capability across risk, engineering, operations, governance, communication, and measurement.

5 Jan 2026 · 8 min read

Beyond legal #15: Data sovereignty and absolutism

Why absolutism fails unless the business is absolutist too — and what to do instead.

22 Dec 2025 · 4 min read

The convergence of AI Governance, Data Protection, and ESG

AI Governance, Data Protection, and ESG (Environmental, Social, and Governance) should no longer be siloed departments. They are converging into a single operational imperative. If you are a Data leader, you are also an ESG leader. If you are an Infrastructure leader, you are also a Tech risk officer.

12 Dec 2025 · 9 min read

The messy reality of data protection risk

This post introduces a work-in-progress Causal Loop Diagram, evolving from my earlier "ripple effects" model, that uses the QSEM tool to visualise the messy, interconnected reality of systemic data protection risks and feedback loops.

9 Dec 2025 · 3 min read

Data Protection Week 2026: Beyond the dry legal updates

As we gear up for Data Protection Week 2026, our diverse schedule of interactive sessions, ranging from Lego® Serious Play® to AI ethics, shows that data protection has evolved far beyond a legal box-ticking exercise.