Blog · PURPOSE AND MEANS

Blog

Latest insights on data protection, AI governance, and GRC leadership.

24 Feb 2025 · 7 min read

Risk theatre: stop the compliance charade before it costs you

Companies must move beyond vague risk labels like high, medium, and low, or even red, amber, and green, and instead quantify risk in financial terms, ensuring clear definitions aligned with business context, risk policy, and appetite to avoid costly mistakes and misleading assessments.

20 Feb 2025 · 6 min read

Leadership in data protection and AI governance: influence through the words and phrases you use

We look into into how data protection and AI governance leaders can become more influential by leveraging powerful language and a compelling vision to go beyond compliance, inspiring trust and driving innovation while reshaping the narrative around ethical data practices.

17 Feb 2025 · 4 min read

AI workforce transformation: lessons from 2011 and the challenges of 2025

There are striking similarities between AI-driven workforce transformation in 2025 and the governance of enterprise IT shifts I helped navigate in 2011, revealing why structured workforce planning, upskilling, and role evolution are more critical than ever.

17 Feb 2025 · 5 min read

Why you need to consider data protection with every software release

Before any software release goes live, companies must consider data protection risks to prevent unintended harm, ensure compliance, and avoid costly failures, because once personal data is exposed or misused, there’s no taking it back.

13 Feb 2025 · 4 min read

Aligning AI and data protection with ESG: why clean energy must be part of the strategy

AI and data protection are often seen as separate from corporate sustainability strategies, but in reality, they are fundamental to achieving ESG goals. Companies that fail to integrate clean energy into their AI and data infrastructure risk not only regulatory scrutiny but also reputational damage.

10 Feb 2025 · 3 min read

From isolation to impact: how Rapid Analysis Workshops build stronger TechReg networks

Rapid Analysis Workshops transform fragmented TechReg networks into action-driven communities by surfacing key issues, prioritising solutions, and creating a structured plan for continual improvement.

6 Feb 2025 · 4 min read

Data Protection: you’re not as mature as you think

Many data protection leaders assume their programme is in good shape, until a Data Protection Maturity Assessment proves otherwise. In just 1-2 months, this assessment can uncover hidden gaps, misaligned processes, and risks that could cost your business far more than the time it takes to fix them.

31 Jan 2025 · 3 min read

Reflections on Data Protection Week: nine events, at least two thousand attendees, and one flu

Nine events, 2,000 attendees, interactive content, and a flu battle. Data Protection Week pushed preparation, technology, and resilience to the limit.

26 Jan 2025 · 4 min read

Plan, execute, move forward and show progress: focus on what matters and let the process handle the details

Rapid Analysis Workshops help compliance leaders plan, execute, and move forward by focusing on what truly matters, enabling progress while a structured process manages the smaller, complex details that often slow teams down.

20 Jan 2025 · 6 min read

Blurred boundaries: is GenAI enhancing creativity or stealing ideas?

I’ve always believed that you have to get your hands dirty to understand the inner workings of a tool, or a process. Theoretical concepts are fine, but they pale in comparison to what you learn when you’re in the engine room. I'm talking GenAI where I've found the tools useful, powerful and worrying.

14 Jan 2025 · 4 min read

Horizon scanning for data protection: are you future-proofing or just firefighting?

Most companies treat data protection like plugging leaks in a sinking ship. Breach here? Patch it. New regulation? Scramble to comply. New threat? Panic and buy a solution. This reactive approach is exhausting, and worse, it’s unsustainable.

13 Jan 2025 · 4 min read

Dark data is wasting resources and your ESG score isn’t looking good either

Data protection and environmental sustainability are often seen as separate priorities, but they’re deeply connected, and the social component of ESG makes the relationship even more complex. The data we collect or generate, store, use, secure (and eventually delete) doesn’t just have an environmental impact, it also affects equity, access, and fairness.

12 Jan 2025 · 4 min read

AI Governance needs to be living and breathing, not a dead duck

Static AI policies are dead ducks. They sit unused, while AI evolves and creates risks in real time. Living, and breathing governance supported by our Interactive Policy Packs can transform AI policies into actionable tools that truly guide ethical decision-making.

9 Jan 2025 · 4 min read

Over-reliance: when tools stop helping and self-doubt creeps in

Balancing AI progress with accountability, this post explores the risks of over-reliance and the need for strong governance to maintain control

31 Jul 2024 · 3 min read

Understanding Governance versus Management of Technology

Lots of talk about ‘governance’ these days in various technology contexts, especially around AI. Lots of misunderstandings too.