Training and Awareness

12 Mar 2026 · 4 min read

Piecing together your team's work practices, brick by brick

Sometimes, the most complex data protection or GRC challenges are best solved not by traditional meetings but by building models of our reality.

2 Mar 2026 · 4 min read

The myth of the CEO’s surveillance dashboard

Workplace surveillance is rarely a simple top-down pyramid, but a recursive trap where "Dataism" judges the C-suite and the true "ultimate dashboard" sits not in the boardroom, but with the IT administrators.

13 Feb 2026 · 5 min read

Beyond legal #17: Planting other trees in the forest

Whether you are a business leader trying to decouple from high-risk vendors, or a consumer trying to protect your family's digital footprint, the strategy is the same. We must stop looking only at the shiny leaves of the apps we use and start understanding the roots. Our mindset needs to be switched to "risk reduction."

9 Jan 2026 · 4 min read

Avoid the ivory tower: Hub-and-Spoke AI governance without exhausting your local colleagues

AI governance is about to be stress-tested by agentic systems, and the companies that hold up won’t be the most centralised, they’ll be the ones that embed oversight locally without burning out their champions.

9 Dec 2025 · 3 min read

Data Protection Week 2026: Beyond the dry legal updates

As we gear up for Data Protection Week 2026, our diverse schedule of interactive sessions, ranging from Lego® Serious Play® to AI ethics, shows that data protection has evolved far beyond a legal box-ticking exercise.

27 Nov 2025 · 4 min read

Know your Game Plan from your Roadmap

We often confuse a schedule with a strategy, but while a roadmap tells you when a project finishes, only a Game Plan explains how you effectively succeed.

10 Nov 2025 · 4 min read

From issues to action: a playful, practical workshop for Data Protection Day 2026

When a financial services Data Protection Leader needs to unite 37 entities across multiple countries for a critical 2026 planning session, we're including some elements of play.

30 Oct 2025 · 9 min read

How to build a Future Radar that actually works

I've been designing and facilitating workshops, and practicing business analysis for decades. After developing a radar covering the future of this field, a few things stood out prompting me to update my personal development plan for 2026.

26 Oct 2025 · 9 min read

Beyond legal #11: Stop counting activities and start measuring outcomes

In this eleventh post of my "beyond legal" series, I'm addressing perhaps the most forgotten about competency in data protection leadership: the ability to measure what actually matters. Many data protection functions are stuck in a rear-view mirror mindset, counting compliance activities instead of driving forward-looking performance that demonstrates real business value.

23 Oct 2025 · 4 min read

Data Protection Day 2026 as your strategic launchpad

Data Protection Day, often seen through a legal lens, is a tremendous opportunity for data protection leaders to ignite a year-long, company-wide culture of data stewardship that goes way beyond compliance.

2 Oct 2025 · 9 min read

Beyond legal #10: The battle for minds - why your data protection training needs an advertising makeover

Most data protection training fails not because employees don't care about the subject, but because it's often designed by lawyers for lawyers. It's time to learn from the masters of human psychology - advertisers - and start moving employee engagement away from compliance checkboxes into a creative challenge.

3 Sep 2025 · 8 min read

Beyond legal #6 : The great governance misunderstanding

The failure to differentiate between governance and management is not an academic debate. It is the root cause of companies finding themselves in crises, asking themselves "How on earth did we end up here?"

22 Aug 2025 · 8 min read

Beyond legal #3: Why data protection leadership is more complex than just 'difficult' laws, and what it takes to succeed

Distinguishing between difficulty and complexity is crucial. Learn how a multi-disciplinary approach, beyond legal expertise, is essential to establish and run an effective data protection function or office.

13 Aug 2025 · 7 min read

Beyond legal #1: The data protection leader's journey begins

This first post introduces the critical non-legal skills, such as business analysis and stakeholder management, that a Data Protection Leader must master to embed data protection into a global company’s operations.

11 Aug 2025 · 3 min read

Simplify the GDPR? Upgrade your competences instead

The perceived complexity of GDPR and other data protection laws is often a result of a lack of competent leadership and multidisciplinary teams, rather than the laws themselves, emphasising the need for a broader skill set beyond legal knowledge for successful implementation.