A new law on personal data arrives with a long list of duties and a short amount of time. The useful question on this panel was not what the whole of compliance looks like, but what a realistic first step is. Part of the answer is uncomfortable: newer systems are not safer by default. The newer parts of an estate are often where sensitive data sits unguarded, because they were built fast and nobody went back to look.
I joined this panel at a partner event of Berca Hardayaperkasa in May 2024.