Session
Organisations that hold and process personal data gave a lot of thought to how they protect it, and how they respect peoples’ rights, when GDPR came into force in 2018. Six years later, many are asking whether they’re still doing everything necessary to ensure compliance. A particular area where understanding remains somewhat shrouded in mystery is ‘privacy by design’ both in terms of what it means in practice, as well as how risk managers can determine whether it’s true of systems used within their organisations.