Last Year’s Hot Topic: Is GDPR Now Just Blah, Blah, Blah?

I met a very intense young lady on the Arlanda Express yesterday. Actually, I didn’t meet her, but I feel like I know her really well. Molly (name changed to protect her identity) has a real issue it seems. The risk assessment on some of her firm’s property portfolio, let’s call them SweCo (name changed to protect its identity), hasn’t fully considered geography in the risk assessment, leaving her exposed in some regions of Russia.

Billy, (name changed to protect his identity) is to blame. But by all accounts, Billy is an emotional snowflake and Molly is sick of having rows with him. Michael (name changed to protect his identity), the boss, agrees with Molly but nothing is happening. What is Molly to do?

In my view Molly should recognise she is on a packed train with people who she doesn’t know. Molly clearly felt the need to demonstrate how important she was even if that meant giving away trade secrets. Let’s hope Molly isn’t quoted in Dagens Nyheter today.

Just 24 hours earlier I was returning from Paris on the Eurostar. The dot-matrix screen above our heads reminds passengers that some people like to travel in ‘tranquillité’.

I certainly wanted to travel in ‘tranquillité’ as it was 8pm and I’d been up since 4.30am.

Dave (name changed to protect his identity) doesn’t care about ‘tranquillité’. Dave’s got important business. He needs to decide on the recipients and the prize for the staff incentive scheme. Clearly, he needs to consult loudly on the phone with I assume the HR person. Sheila, sat opposite, a colleague, (name changed to protect her identity) seems more intent on necking as much complimentary wine as possible but she contributes as she sees fit, mostly by shouting down Dave’s ideas.

It turns out Shelley (name changed to protect her identity) is the outstanding candidate for employee of the year. Everyone agrees. Sadly for Shelley, she is a bit of an arse licker and Sheila is worried there’ll be a backlash if she wins it. A troublesome dilemma indeed. Just before I aim a bread roll at his head, Dave decides to reward the whole team with, wait for it… strawberries and cream. Phew, disaster averted.

It would appear trains are a breeding ground for the anti-GDPR movement. I still recall with mild amusement finding out on a train once that we hadn’t won a pitch. The client didn’t call or email. I found out because one of her colleagues was sat opposite me discussing the pitch with her best mate, who just happened to work for the winning agency.

I know of at least four HR Managers who still wake up in the middle of the night screaming, having dreamt that the grim reaper from the ICO is dragging them by the hair to data jail where they will be forced to forever write ‘I will not make a data breach’ in their blood on a whiteboard.

The time, the money, the effort invested in understanding GDPR and trying to create compliance has been enormous. The angst, frustration and fear associated with it has been equally significant. And yet, it would appear many of us aren’t taking really obvious precautions to protect our data and that of our colleagues and businesses.

Don’t tell me you have never looked over someone’s shoulder when they open their laptop – it’s human nature to be inquisitive. I know the guy I sat next to on the plane last night was looking for a last-minute holiday in Italy. I also know he likes Shania Twain.

GDPR is as much about behaviour and attitude as it is about process or structure. Don’t talk about specifics in public places, don’t write tender documents on trains. It just isn’t smart, and you never know who is listening or looking.

To Molly and Dave, I have no doubt you are important. I also know your inside leg measurement. To Shelley, I’ll be in touch soon.