24 Apr 2026 · 7 min read
Beyond Legal #25: The CISO who thought data protection was a subset of security
Placing data protection inside the security team feels logical but misses what GDPR actually requires. What the security-centric worldview gets wrong.