Data protection rules come from several directions at once: a national law, sector regulators, contracts with customers, standards an organisation has promised to meet. Read one at a time they are manageable. Read together they are a landscape, with overlaps and a few contradictions. This talk walks that landscape and looks for the paths through it: the common controls that satisfy several rules at once, and the order in which to put them in place.
I gave this talk at SPT Solution Day 2023, an event of Secure Pasifik Teknologi, in May 2023.