Skeletons in the Server Room

The scariest data protection risks are the ones you can’t see. From zombie data to ghost suppliers, here’s how an independent GDPR audit helps you find what’s lurking and deal with it with confidence.
These documents may have been reviewed, and oftentimes approved at Board level. You might even require employees to sign that they have understood their responsibilities in them, but the question still remains. Are your data protection policies actually working?

Policy vs practice
Having policies in place and having effective data protection compliance processes are two very different things, and having policies is not indicative that you are meeting your obligations. Even the best policy does little to protect personal data or ensure compliance if staff don’t understand it, internal processes don’t reflect it, and no one checks if it’s followed.

Your data protection policies are written. Are they actually working?

While most organisations recognise internal policies such as a Data Protection, Data Breach, Retention, or Subject Access Request Policy, as vital components of the data protection compliance framework, simply having them written is only part of the equation.

These documents may have been reviewed, and oftentimes approved at Board level. You might even require employees to sign that they have understood their responsibilities in them, but the question still remains. Are your data protection policies actually working?

Policy vs practice
Having policies in place and having effective data protection compliance processes are two very different things, and having policies is not indicative that you are meeting your obligations. Even the best policy does little to protect personal data or ensure compliance if staff don’t understand it, internal processes don’t reflect it, and no one checks if it’s followed.

Flattery Will Get You Everywhere: Why Persuasion Attacks on AI are a Data Protection Risk

I don’t think it’s news to anyone that Artificial Intelligence is becoming deeply embedded within workplaces. From supporting customer service to drafting sensitive reports, AI…

The Real Impact of “Simple” Data Breach

I’ve been following a story that’s deeply troubling, and I think it’s a crucial lesson for anyone who handles sensitive data. Channel 4 recently reported…

Text scammers: If only they would buzz off

Have you noticed a sharp increase in how often you receive these spam messages, emails and calls in the last few years? I have, too.

DPAS Data Protection Bulletin – July 29 2025

The latest data protection news and developments from all around the world.

Accidental eavesdropping: Should I be hearing that?

There’s something that feels a little funny about giving these details out verbally, where the people around you can overhear.

Air fryer spies and fridge snitches: 7 appliances collecting your data

Your fridge is the last thing you’d expect to be spying on you.

DPAS Data Protection Bulletin – June 26 2025

The latest data protection news and developments from all around the world.

Bespoke data protection training: Keeping your staff engaged

Off-the-shelf courses are often too generic. Staff quickly disengage, and the training is forgotten as soon as the browser is closed.

13 Easy to Understand Changes in the Data (Use and Access) Bill

As we can now expect the bill to come into law very soon, here are 13 of the bill’s most interesting key changes that you’ll want to know.

DPAS Data Protection Bulletin – May 28 2025

The latest data protection news and developments from all around the world.