I’m often asked what I like about data protection.

Well, I love the fact that it is not always black and white. Anyone who knows me, knows that I usually start a response with “it depends”. It depends how you collect the information, what you want to use it for, who you are sharing it with etc.

But understanding data protection legislation is not the real challenge with achieving compliance.

The biggest challenge is creating a process that can be easily followed. Once the process is in place we can manage the change programme so that all staff are able to follow the process. The process needs to be followed consistently.

When creating an effective process, you don’t necessarily need to know all about the legislation, the process for each element just needs to be followed. But that requires everyone to follow the process and that is about successfully implementing the process and change management.