Blog · PURPOSE AND MEANS

Blog

Latest insights on data protection, AI governance, and GRC leadership.

24 Apr 2025 · 6 min read

Horizon scanning for beginners: Part 1 - laying the foundation with objectives and scope

This initial installment of our foresight series illuminates the critical factors, including business sector, nature of business, geographies, and applicable laws, that must guide the definition of scope and objectives for effective horizon scanning, thereby maximising resource allocation and strategic impact.

22 Apr 2025 · 6 min read

Responsible automation using Make from a data protection perspective

By integrating data protection by design and by default principles into Make.com scenarios, you can can responsibly build GenAI agents that automate tasks, streamline processes, and ensure compliance with regulations like the EU AI Act and data protection laws.

14 Apr 2025 · 7 min read

Navigating the blurry lines between corporate and personal use of GenAI

Companies must proactively balance the innovative potential of GenAI with effective data security measures and employee empowerment to effectively mitigate risks arising from the blurred boundaries between workplace and personal use.

10 Apr 2025 · 7 min read

Washing away responsibility? BigTech's data centres and the growing water crisis

We look at how significant and potentially unsustainable water consumption of BigTech data centres, as highlighted in a recent article in The Guardian, poses a direct threat to their publicly stated ESG goals, particularly their environmental and social commitments, and risks accusations of greenwashing, social washing, and overall ESG washing.

9 Apr 2025 · 6 min read

Stop playing catch-up: why your team must scan the horizon, starting immediately!

Establishing collaborative horizon scanning now, concurrently with addressing immediate geopolitical pressures, is not a luxury but a vital leadership imperative for cultivating the foresight essential to long-term organisational resilience and avoiding the strategic disadvantage of perpetually playing catch-up.

4 Apr 2025 · 6 min read

The carbon cost of data: why data minimisation matters now

Embracing data minimisation is not simply about ticking a compliance box, it represents a fundamental shift in mindset towards a responsible and sustainable approach to data, ensuring that we not only protect individual rights and freedoms but also safeguard the future of our planet.

2 Apr 2025 · 5 min read

The erosion of inclusion: political interference threatens socially responsible business practices

The current scrutiny of ESG initiatives, particularly regarding DEI, forces companies to navigate a precarious balance between upholding social values, respecting individual rights and freedoms, and complying with evolving political demands.

27 Mar 2025 · 6 min read

Cutting through complexity: How visual communication helps data protection and GRC leaders convey their work to busy colleagues

Infographics, explainers, and one-pagers are indispensable visual communication tools for data protection and GRC leaders to effectively convey complex information to diverse stakeholder groups.

17 Mar 2025 · 4 min read

Are ESG leaders using PESTEL to navigate political crosswinds, or are they flying blind?

ESG leaders must adapt to shifting political landscapes by conducting regular analysis and align data protection with evolving ESG requirements to maintain integrity, compliance, and stakeholder trust, or risk their programs becoming dangerously misaligned with regulatory realities.

10 Mar 2025 · 5 min read

AI risks, compliance & leadership: why younger mentors are key

By tapping into the expertise of younger employees, companies can build a more AI-literate leadership team that helps future-proof their companies.

7 Mar 2025 · 5 min read

Data protection leaders are overloaded. What needs to change?

Data protection leaders are increasingly overwhelmed by regulatory complexity and operational burdens, necessitating a shift from compliance-focused roles to strategic business enablers, supported by advanced tools and resources to unlock their full potential.

6 Mar 2025 · 5 min read

The illusion of data protection: are you measuring risk effectively?

Most companies unknowingly create an illusion of data protection by relying on compliance checklists and heatmaps, but without quantifiable risk measurement, they are merely performing theatrics rather than effectively managing real threats.

5 Mar 2025 · 7 min read

Turning audit chaos into a clear, actionable plan: a five-step approach

Here's an approach that transforms the overwhelming task of responding to an audit into a clear, structured process - breaking down chaos into an actionable plan, just like turning a pile of disorganized bricks into a strong, fortified wall.

28 Feb 2025 · 5 min read

Did you see "it" coming? The companies that track weak signals always do

If your company didn’t see the Trump administration’s rapid rollback of AI regulations and ESG mandates coming, it’s because you weren’t tracking weak signals. Horizon scanning isn’t a luxury, it’s the difference between leading and scrambling to keep up.

25 Feb 2025 · 6 min read

When lawyers manage GRC projects: success or disaster?

GRC projects need skilled and experienced project and programme managers to ensure compliance, mitigate risks, and drive success. Without proper expertise and support, failure is inevitable.