Privacy by Design

22 Aug 2025 · 8 min read

Beyond legal #3: Why data protection leadership is more complex than just 'difficult' laws, and what it takes to succeed

Distinguishing between difficulty and complexity is crucial. Learn how a multi-disciplinary approach, beyond legal expertise, is essential to establish and run an effective data protection function or office.

24 Jun 2025 · 5 min read

Avoid the privacy trap: data protection or data privacy?

The terms "data protection" and "data privacy" are often used interchangeably across different regions and contexts, influenced by factors such as geographic location, professional certifications, and global standards, but it is important to use the correct terminology based on the specific legal framework or context to ensure clarity and effective education.

1 May 2025 · 4 min read

Horizon scanning for beginners: Part 6 – building your roadmap: a practical guide to planning for change

Horizon scanning transitions from identifying weak signals to implementing actionable strategies by engaging key stakeholders to assess impacts, prioritise initiatives, and develop roadmaps that inform a robust business case for future-proofing your company.

22 Apr 2025 · 6 min read

Responsible automation using Make from a data protection perspective

By integrating data protection by design and by default principles into Make.com scenarios, you can can responsibly build GenAI agents that automate tasks, streamline processes, and ensure compliance with regulations like the EU AI Act and data protection laws.

14 Apr 2025 · 7 min read

Navigating the blurry lines between corporate and personal use of GenAI

Companies must proactively balance the innovative potential of GenAI with effective data security measures and employee empowerment to effectively mitigate risks arising from the blurred boundaries between workplace and personal use.

4 Apr 2025 · 6 min read

The carbon cost of data: why data minimisation matters now

Embracing data minimisation is not simply about ticking a compliance box, it represents a fundamental shift in mindset towards a responsible and sustainable approach to data, ensuring that we not only protect individual rights and freedoms but also safeguard the future of our planet.

17 Mar 2025 · 4 min read

Are ESG leaders using PESTEL to navigate political crosswinds, or are they flying blind?

ESG leaders must adapt to shifting political landscapes by conducting regular analysis and align data protection with evolving ESG requirements to maintain integrity, compliance, and stakeholder trust, or risk their programs becoming dangerously misaligned with regulatory realities.

7 Mar 2025 · 5 min read

Data protection leaders are overloaded. What needs to change?

Data protection leaders are increasingly overwhelmed by regulatory complexity and operational burdens, necessitating a shift from compliance-focused roles to strategic business enablers, supported by advanced tools and resources to unlock their full potential.

6 Mar 2025 · 5 min read

The illusion of data protection: are you measuring risk effectively?

Most companies unknowingly create an illusion of data protection by relying on compliance checklists and heatmaps, but without quantifiable risk measurement, they are merely performing theatrics rather than effectively managing real threats.

17 Feb 2025 · 5 min read

Why you need to consider data protection with every software release

Before any software release goes live, companies must consider data protection risks to prevent unintended harm, ensure compliance, and avoid costly failures, because once personal data is exposed or misused, there’s no taking it back.

13 Feb 2025 · 4 min read

Aligning AI and data protection with ESG: why clean energy must be part of the strategy

AI and data protection are often seen as separate from corporate sustainability strategies, but in reality, they are fundamental to achieving ESG goals. Companies that fail to integrate clean energy into their AI and data infrastructure risk not only regulatory scrutiny but also reputational damage.

20 Jan 2025 · 6 min read

Blurred boundaries: is GenAI enhancing creativity or stealing ideas?

I’ve always believed that you have to get your hands dirty to understand the inner workings of a tool, or a process. Theoretical concepts are fine, but they pale in comparison to what you learn when you’re in the engine room. I'm talking GenAI where I've found the tools useful, powerful and worrying.

14 Jan 2025 · 4 min read

Horizon scanning for data protection: are you future-proofing or just firefighting?

Most companies treat data protection like plugging leaks in a sinking ship. Breach here? Patch it. New regulation? Scramble to comply. New threat? Panic and buy a solution. This reactive approach is exhausting, and worse, it’s unsustainable.

13 Jan 2025 · 4 min read

Dark data is wasting resources and your ESG score isn’t looking good either

Data protection and environmental sustainability are often seen as separate priorities, but they’re deeply connected, and the social component of ESG makes the relationship even more complex. The data we collect or generate, store, use, secure (and eventually delete) doesn’t just have an environmental impact, it also affects equity, access, and fairness.