A GDPR risk assessment is a written review of what can go wrong with the personal data you process, how bad it would be for the people the data is about, and what you do to prevent it. It is the basis for choosing an appropriate level of security, as required by Article 32 of […]

In the latest annual review of more than 12,000 confirmed data breaches, a person was involved in around 60 percent of them. Someone clicked, reused a password or sent a file to the wrong recipient. The figure comes from the 2025 Data Breach Investigations Report, and it explains why IT security in the workplace largely […]

In a company with 15 employees, the IT manager is usually also the bookkeeper, the buyer or the owner. Security gets handled when there is time, and there rarely is. Meanwhile, criminals use automated tools that send the same fake invoices and login attempts to thousands of firms at once, regardless of size. A small […]

Document handling under GDPR comes down to three questions: Where is the document stored, who can open it, and when is it deleted? The rules apply to every document containing personal data, whether it is a contract in an HR system, a spreadsheet on the desktop or a printout in a drawer. Most companies have […]

Styrelsen for Samfundssikkerhed, the Danish government agency responsible for cyber security, rates the threat from cybercrime against Danish organisations as very high. It has been at that level for several years, and most management teams have responded by buying technology: a better firewall, a better spam filter, cloud backup. Those are sensible investments. They only […]

When Gladsaxe Municipality needed to train around 7,000 employees in GDPR, one of the requirements was that the course had to make sense to everyone, from administrative staff to childcare workers and social and healthcare assistants. They all handle personal data every day, just in very different situations. That is true for most organisations. The […]