Insights

Reports

Latest Research

24 March 2025

Strength through privacy

With no federal data protection act and limited alignment between individual US states for privacy and cyber legislation and with AI raising the stakes, we surveyed 100 senior leaders with responsibility for data protection across the e-commerce, healthcare and retail financial services sector in the US. Our report summarises what we discovered regarding the current attitudes and behaviours of US organisations towards data privacy management, attitudes towards risk, AI and data governance and more.

Download report Read more

26 April 2023

Privacy Made Positive® USA

Our latest report covers data privacy. consumer choice and behaviours across the US. Our findings provide an insight into how consumers across the United States act on privacy and motivations behind choosing one brand over another.

Download eBook

08 May 2021

Privacy Made Positive® Europe

Customers and decision making in Europe: How much of a part does privacy play? Download the eBook to discover what we found when we polled 4,000 consumers across Great Britain, France, Germany and Ireland.

Download eBook

07 July 2020

Privacy Made Positive® Economic Research

What is the economic value of privacy and ethical behaviour? Download the eBook to discover the value behind good privacy practices.

Download eBook

White papers

AI regulation white paper

Our latest white paper sets out general guidelines for ethical and compliant use of AI and works through a number of practical examples to help elucidate the issue and present a compliant approach and appropriate safeguards.

Download white paper

Articles

Buying versus building privacy capabilities

Do you operate in a developing marketing? Are you aware of the five key factors organisations in developing markets should consider when deciding whether to buy or build their data privacy capabilities? For those facing this dilemma, click below to discover more.

06 May 2025

Why similar breaches are not created equal

With data breaches hitting the headlines on an almost weekly basis, Practice Lead, Marc Marrero provides a practical overview of the key factors that drive behind similar data breaches yielding varying outcomes in differing regulatory regimes. manage its data protection risk.

06 May 2025

A first-principles approach to AI data protection

In a bid to provide practical guidance on the data privacy impact of AI tools, Practice Lead, Karen Bollard, indicates why revisiting core data protection principles is always a good place to start.

04 April 2025

The Gulf of America

John Lloyd, Managing Director focuses on the US, referencing research we have recently conducted there. To understand why he maintains a sense of optimism regarding data protection, sensing that customer engagement and trust will win out, read his article.

28 January 2025

Looking ahead

Ben Rapp, Group CEO, looks ahead and provides his perspective on global data protection dynamics, regulation, AI and why trust underpins the future.

18 December 2024

The cost of not having a privacy programme

Are you looking to justify your firm's investment in data privacy and wondering how best to make your case internally? Read Practice Lead Marc Marrero's alternate perspective.

11 December 2024

DPA legislation: the sword and the shield

Head of Practice, Andre Palmer considers why the impact of the recent Morrison versus Elephant Group case matters

03 December 2024

Reflections on the Global Privacy Assembly, Jersey 2024

Ben Rapp, Group CEO reflects on why concerns about AI regulation continue, why the tide may have turned on international data transfers and why conflicts between data privacy legislation and other laws call for the careful navigation of such tensions.

05 October 2023

Chain of fools

Recent prominent outages and data breaches serve to underline supply chain vulnerabilities. Read our latest article on ways to manage third party risks.

26 September 2024

Data privacy versus cybersecurity

Securys Associate, Ainsworth Levy indicates why confusion still reigns regarding data privacy and cybersecurity in emerging data privacy markets.

18 July 2024

Why a privacy-centric approach matters to direct marketing

Brands operating globally need to understand the nuances of different privacy regimes and their requirements. Marc Marrero, Practice Lead takes a global view and reviews six data protection laws, outlining the implications of each of these on direct marketing activities.

30 April 2024

Marketing and Privacy - there's the law, there's best practice and there's reality

Group Chief Executive Officer, Ben Rapp considers what privacy means for marketing and why it matters for your brand, your consumers and your business

03 June 2024

Countdown to the India Digital Personal Data Protection Act 2023

With the clock ticking, the countdown is now on. Read Senior Consultant, Karen Bollard's summary of the key considerations and actions businesses should actively be taking to ensure compliance.

07 May 2024

Practical considerations for the crafting of an effective data retention policy

Effective data retention makes sure that only relevant data is retained. This drives operational efficiencies and reduces risk.

30 April 2024

Back to data protection basics

Group Chief Executive Officer, Ben Rapp reflects on why the keyword in data protection is 'fairness' and advocates the importance of going back to data protection basics.

20 March 2024

Black Box Insurance and Data Protection

Whilst black box insurance offers benefits for drivers and insurers, it raises data privacy issues that need to be addressed. Read more

06 March 2024

Doing more with less: Privacy challenges in emerging markets

Read Marc Marrero's article to understand the privacy challenges facing emerging markets and his thoughts on potential solutions.

27 February 2024

Caution is the watchword

Ben Rapp reflects on why AI governance is an intrinsic part of data governance and underlines the crucial role data privacy plays.

20 December 2023

Hey Siri, who will win the AI war in 2024?

To understand what links AI models and Cabbage Patch Dolls, read Practice Lead, John Lloyd's crystal ball gazing article on AI in the year ahead.

05 December 2023

China Crisis

Moving personal data out of China demands the completion of a detailed cross-border transfer impact assessment. Senior Consultant, James Flint provides practical guidance on what's involved and reinforces the importance of an organisation keeping accurate records of processing.

29 November 2023

The UK Digital Bill: a delicate balancing act

The bill now numbers some 300 pages. To save you a long read, Senior Consultants, Karen Bollard and Marc Marrero outline their thoughts on elements of the UK's Digital Bill and their likely impact .

02 November 2023

Reflections on the Global Privacy Assembly

Ben Rapp provides his perspective on regulatory developments outside the conventional EU/UK/US axis and highlights the challenges faced by developing nations with emerging privacy regulations, and most notably those in the Caribbean.

02 October 2023

Privacy at a crossroads

It feels as if we are approaching a key junction. On the one hand we have ever more legislation to protect personal data. On the other, technology and society depend on collecting more of that data.

28 September 2023

Ringside at the AI Bullfight

Privacy matador, James Flint, reveals the fault lines exposed between the AI titans who spoke at London's recent CogX Festival where they debated AI regulation alongside other deep tech challenges.

26 September 2023

The new Swiss nFADP - what companies need to know

What do companies operating with personal data throughout Europe need to know about the new nFADP? Are you aware how the new act differs from GDPR and the operational implications?

10 October 2023

Do the French authorities know what I look like?

With the use of facial recognition at and around stadiums for the Rugby World Cup, lifelong Ireland fan, Karen Bollard, divulges what she discovered during her recent visit to France to watch her heroes play.

17 May 2023

Privacy: Risk and Reward

Helping business to seize the privacy opportunity

01 March 2023

AML, KYC and data privacy - a delicate balancing act

The tensions surrounding keeping financial services regulators, data protection regulators and – most importantly – customers happy.

24 March 2022

KYC, AML - are you getting the basics wrong?

The consequences of not getting up to speed on data security can be crippling for a small business, both financially and from a customer retention perspective.

08 February 2022

Stop Hoarding!

Why it is time to ditch that hoarding habit when it comes to data.

26 September 2023

The value of trust

Trust is the rock on which brands are built. What role should privacy play in trust-building?

20 January 2022

ESG is not just a hashtag

Recording

08 July 2021

IDT 2: Brexit, adequacy and International Data Transfers

The framing of the Schrems II judgement makes it even less likely that the UK will get data adequacy as part of any Brexit trade agreement. Organisations need to re-examine their international data processing.

Watch

Events

Event

27 March 2025

CEO Forum: Digital Transformation

Group CEO, Ben Rapp provided the keynote presentation on the role of the CEO in digital transformation. He challenged leaders to rethink data governance - to view it not as a compliance obligation, but as a cornerstone of trust, value creation and sustainable growth. His message was clear: companies that treat data as a strategic asset will lead the next wave of innovation and resilience.

Watch now

20 March 2024

Compliance Beyond Borders: Insights from Financial Regulators

Hosted in Barbados, the one-day conference saw Lisa Greaves, Data Protection Commissioner, Barbados and key regulators and representatives from the financial services industry discuss compliance priorities. Videos of keynote presentations and panel sessions on conference page. Click below to view videos.

06 February 2024

The EU AI Act Summit 2024

Summit provided practical guidance about how both providers and corporate users of AI should be preparing now for the introduction of this far-reaching piece of legislation.

19 March 2024

How brands can conquer Data Governance with AI on the rise

Part of the AMA virtual workshop series. Understand what responsible AI means for the professional marketeer and how it can be used to build a better brand.

23 January 2024

Ensuring fair and lawful AI implementation

Hosted in conjunction with Privacy Laws & Business, the roundtable considered how AI systems can be implemented in a fair and lawful way, reflecting data protection principles and law.

Reports

Strength through privacy

Privacy Made Positive® USA

Privacy Made Positive® Europe

Privacy Made Positive® Economic Research

White papers

AI regulation white paper

Articles

Buying versus building privacy capabilities

Why similar breaches are not created equal

A first-principles approach to AI data protection

The Gulf of America

Looking ahead

The cost of not having a privacy programme

DPA legislation: the sword and the shield

Reflections on the Global Privacy Assembly, Jersey 2024

Chain of fools

Data privacy versus cybersecurity

Why a privacy-centric approach matters to direct marketing

Marketing and Privacy - there's the law, there's best practice and there's reality

Countdown to the India Digital Personal Data Protection Act 2023

Practical considerations for the crafting of an effective data retention policy

Back to data protection basics

Black Box Insurance and Data Protection

Doing more with less: Privacy challenges in emerging markets

Caution is the watchword

Hey Siri, who will win the AI war in 2024?

China Crisis

The UK Digital Bill: a delicate balancing act

Reflections on the Global Privacy Assembly

Privacy at a crossroads

Ringside at the AI Bullfight

The new Swiss nFADP - what companies need to know

Do the French authorities know what I look like?

Privacy: Risk and Reward

AML, KYC and data privacy - a delicate balancing act

KYC, AML - are you getting the basics wrong?

Stop Hoarding!

The value of trust

ESG is not just a hashtag

Data breaches the new PPI

Webinars

Privacy sells: How US consumers act on privacy

Employee data: Who, what, why, where and when?

IDT 7: Is this the end of the world as we know it?

IDT 6: Brexit, adequacy and international data transfers - the next chapter

KYC, AML and data privacy – a delicate balancing act

Privacy Made Positive: Consumers act on privacy

IDT 5: What's next for International Data Transfers?

IDT 4: What's next for post-Brexit transfers?

IDT 3: Brexit, adequacy and International Data Transfers.

IDT 2: Brexit, adequacy and International Data Transfers

Events

CEO Forum: Digital Transformation

Compliance Beyond Borders: Insights from Financial Regulators

The EU AI Act Summit 2024

How brands can conquer Data Governance with AI on the rise

Ensuring fair and lawful AI implementation

Act now and speak to us about your data protection needs.