Behaviour Change

12 Mar 2026 · 4 min read

Piecing together your team's work practices, brick by brick

Sometimes, the most complex data protection or GRC challenges are best solved not by traditional meetings but by building models of our reality.

9 Mar 2026 · 4 min read

Beyond legal #20: Getting real with harms

Notes from the FTC’s latest conference about informational harms highlighting why data protection is a complex economic, societal, and product design issue that is far too critical to be left solely to the legal department.

13 Feb 2026 · 5 min read

Beyond legal #17: Planting other trees in the forest

Whether you are a business leader trying to decouple from high-risk vendors, or a consumer trying to protect your family's digital footprint, the strategy is the same. We must stop looking only at the shiny leaves of the apps we use and start understanding the roots. Our mindset needs to be switched to "risk reduction."

9 Dec 2025 · 3 min read

Data Protection Week 2026: Beyond the dry legal updates

As we gear up for Data Protection Week 2026, our diverse schedule of interactive sessions, ranging from Lego® Serious Play® to AI ethics, shows that data protection has evolved far beyond a legal box-ticking exercise.

27 Nov 2025 · 4 min read

Know your Game Plan from your Roadmap

We often confuse a schedule with a strategy, but while a roadmap tells you when a project finishes, only a Game Plan explains how you effectively succeed.

23 Oct 2025 · 4 min read

Data Protection Day 2026 as your strategic launchpad

Data Protection Day, often seen through a legal lens, is a tremendous opportunity for data protection leaders to ignite a year-long, company-wide culture of data stewardship that goes way beyond compliance.

2 Oct 2025 · 9 min read

Beyond legal #10: The battle for minds - why your data protection training needs an advertising makeover

Most data protection training fails not because employees don't care about the subject, but because it's often designed by lawyers for lawyers. It's time to learn from the masters of human psychology - advertisers - and start moving employee engagement away from compliance checkboxes into a creative challenge.

13 Aug 2025 · 7 min read

Beyond legal #1: The data protection leader's journey begins

This first post introduces the critical non-legal skills, such as business analysis and stakeholder management, that a Data Protection Leader must master to embed data protection into a global company’s operations.

21 Jul 2025 · 4 min read

How tech feeds a curious public (or a baying mob)

The Coldplay kiss cam scandal exemplifies the dangers of viral digital exposure, as the rush to public judgment not only devastates those directly involved but also inflicts lasting, unintended harm on their families and wider social circles.

12 May 2025 · 5 min read

The power of interactive GRC infographics in workplace communication

Interactive GRC infographics transform complex workplace information into engaging visual experiences that improve employee understanding, boost retention, and modernise internal communications by allowing staff to interact with information at their own pace, making them an invaluable tool for modern companies seeking to effectively communicate abstract concepts.

10 Mar 2025 · 5 min read

AI risks, compliance & leadership: why younger mentors are key

By tapping into the expertise of younger employees, companies can build a more AI-literate leadership team that helps future-proof their companies.

20 Feb 2025 · 6 min read

Leadership in data protection and AI governance: influence through the words and phrases you use

We look into into how data protection and AI governance leaders can become more influential by leveraging powerful language and a compelling vision to go beyond compliance, inspiring trust and driving innovation while reshaping the narrative around ethical data practices.

17 Feb 2025 · 4 min read

AI workforce transformation: lessons from 2011 and the challenges of 2025

There are striking similarities between AI-driven workforce transformation in 2025 and the governance of enterprise IT shifts I helped navigate in 2011, revealing why structured workforce planning, upskilling, and role evolution are more critical than ever.

31 Jan 2025 · 3 min read

Reflections on Data Protection Week: nine events, at least two thousand attendees, and one flu

Nine events, 2,000 attendees, interactive content, and a flu battle. Data Protection Week pushed preparation, technology, and resilience to the limit.

12 Jan 2025 · 4 min read

AI Governance needs to be living and breathing, not a dead duck

Static AI policies are dead ducks. They sit unused, while AI evolves and creates risks in real time. Living, and breathing governance supported by our Interactive Policy Packs can transform AI policies into actionable tools that truly guide ethical decision-making.