Stakeholder Management

23 Jan 2026 · 8 min read

Beyond legal #16: GRC leaders - your chance to shine

Having a calm head, getting the right people to use methodical approaches and truly understanding the types of risk we are talking about has never been more important in this day and age.

9 Jan 2026 · 4 min read

Avoid the ivory tower: Hub-and-Spoke AI governance without exhausting your local colleagues

AI governance is about to be stress-tested by agentic systems, and the companies that hold up won’t be the most centralised, they’ll be the ones that embed oversight locally without burning out their champions.

3 Dec 2025 · 8 min read

Beyond Legal #13: From signed contracts to trusted partnerships

How mastering vendor management turns “third-party risk” into “third-party value” in an age of AI and Data Sovereignty.

27 Nov 2025 · 4 min read

Know your Game Plan from your Roadmap

We often confuse a schedule with a strategy, but while a roadmap tells you when a project finishes, only a Game Plan explains how you effectively succeed.

10 Nov 2025 · 4 min read

From issues to action: a playful, practical workshop for Data Protection Day 2026

When a financial services Data Protection Leader needs to unite 37 entities across multiple countries for a critical 2026 planning session, we're including some elements of play.

5 Nov 2025 · 14 min read

Beyond legal #12: From headless chickens to coordinated data breach response - why operations beat legal theatre

In this twelfth post of my "beyond legal" series, I'm addressing what many data protection professionals dread: that call you get after you've just finished your third glass on a Friday night. Some breach response plans look impressive in binders gathering dust, but fall apart the moment someone accidentally shares a database containing millions of customer records, or when ransomware locks down your production systems at 2am on a Saturday morning.

28 Aug 2025 · 9 min read

Beyond legal #5: Get to know your data management and data governance colleagues

Data protection leaders must evolve beyond a purely legal and compliance-based role by familiarising themselves with the principles of data management and data governance. To succeed, they must collaborate with technical and business teams, shifting their narrative from risk avoidance to one that enables innovation and builds trust as a competitive advantage.

26 Aug 2025 · 8 min read

Beyond legal #4: time to up your risk game

To be effective and gain strategic influence, data protection leaders must move beyond the vague 'privacy risk' definition and learn to articulate data protection failures in the language and currency of the business.

20 Aug 2025 · 4 min read

Beyond legal #2: Why every data protection and AI governance leader needs SIRA competences in their toolkit

Your data protection or AI governance work is not stuck because the law is too complicated or your systems systems are outdated. It’s stuck because you’ve not gathered the right competencies to anticipate, assess, plan, implement and eventually run.

13 Aug 2025 · 7 min read

Beyond legal #1: The data protection leader's journey begins

This first post introduces the critical non-legal skills, such as business analysis and stakeholder management, that a Data Protection Leader must master to embed data protection into a global company’s operations.

11 Aug 2025 · 3 min read

Simplify the GDPR? Upgrade your competences instead

The perceived complexity of GDPR and other data protection laws is often a result of a lack of competent leadership and multidisciplinary teams, rather than the laws themselves, emphasising the need for a broader skill set beyond legal knowledge for successful implementation.

21 Jul 2025 · 4 min read

How tech feeds a curious public (or a baying mob)

The Coldplay kiss cam scandal exemplifies the dangers of viral digital exposure, as the rush to public judgment not only devastates those directly involved but also inflicts lasting, unintended harm on their families and wider social circles.

7 May 2025 · 6 min read

Horizon scanning for beginners: Part 8 - the executive pitch: selling foresight to the C-Suite

This last part of our 'beginners' blog series' provides actionable strategies for effectively communicating the value of horizon scanning to executives to get their buy-in and approve to start.

5 May 2025 · 5 min read

Horizon scanning for beginners: Part 7 - senior leadership buy-in: presenting your foresight business case and plan

Following horizon scanning workshops, the vital next step involves translating gathered insights into actionable strategies through business case development, roadmap creation, and detailed A3 planning for senior leadership approval.

1 May 2025 · 4 min read

Horizon scanning for beginners: Part 6 – building your roadmap: a practical guide to planning for change

Horizon scanning transitions from identifying weak signals to implementing actionable strategies by engaging key stakeholders to assess impacts, prioritise initiatives, and develop roadmaps that inform a robust business case for future-proofing your company.