Seven Lessons From Seven Years of the GDPR

GDPR Seven-Year Summary: Key Lessons

  1. Transparency Enhances Trust: Businesses must ensure clear data processing disclosures to customers.
  2. Evolving Data Transfer Rules: Compliance with updated regulations on international data transfers is critical.
  3. Accountability through Documentation: Justifying decisions with thorough record-keeping is crucial for accountability.
  4. Defined Roles in Data Supply Chain: Clarity on who is accountable in data processing relationships helps manage risks.
  5. Digital Processing Compliance: Organizations must secure explicit consent for non-essential cookies and tracking technologies.
  6. Security and Preparedness: Robust cybersecurity training is vital to respond effectively to breaches.
  7. Regulatory Intersections: Attention to overlapping regulations (e.g., AI Act, DORA) is necessary for comprehensive compliance.

Businesses must integrate data protection in innovation strategies while adapting to regulatory changes.

https://www.pwc.com/mt/en/publications/tax-legal/seven-lessons-seven-years-gdpr.html

Global Cybersecurity Agencies Release AI Data Security Guidelines, Highlight Data Integrity as Weakness

Global cybersecurity agencies, led by CISA and partnered with NSA and FBI, issued guidelines on securing AI data, noting data integrity as a vulnerability. The guidelines stress the importance of robust data protection throughout the AI lifecycle, offering best practices for risk management, data provenance, and continuous assessments. They highlight that compromised data can lead to flawed AI outputs and emphasize the necessity of strong encryption and access controls for safeguarding sensitive information. The goal is to enhance awareness and resilience against evolving cybersecurity threats, ensuring trustworthiness in AI systems.

https://industrialcyber.co/threats-attacks/global-cybersecurity-agencies-release-ai-data-security-guidelines-highlight-data-integrity-as-ais-weakness/

How IT and OT Are Merging: Opportunities and Tips

IT and OT convergence enhances security, streamlines processes, and cuts costs. A study of 31 CIOs from various industries found most believe in coexistence under a shared vision. Key insights include: CIOs lead convergence in 61% of firms, rising security concerns drive integration, and the importance of data management and communication. Recommendations for effective collaboration include top management support, appointing a central OT manager, and fostering physical proximity between teams. Despite benefits, only 13% of companies are fully integrated, highlighting room for improvement.

https://www.cio.com/article/3991355/how-it-and-ot-are-growing-together.html

Cybersecurity Stocks: AI Innovation & Rise Of Global Threats

AI is transforming cybersecurity, projected to grow from $15 billion in 2021 to $135 billion by 2030. Major firms like Palo Alto Networks adopt AI while cybercriminals use it for advanced attacks. High-profile incidents have increased interest in cybersecurity stocks, with significant gains reported for companies like Cloudflare and Zscaler. As organizations shift towards proactive cybersecurity measures, AI is crucial for improving threat detection and response. However, state-sponsored cyber threats are on the rise, presenting serious challenges to security operations.

https://www.investors.com/news/technology/cybersecurity-stocks-outlook-ai-tariffs-global-threats/

What CIOs Need to Know About the Technical Aspects of AI Integration

CIOs must engage in AI integration, involving embedding AI into IT systems, understanding AI modeling, ensuring quality data, maintaining security, and communicating with technical teams. Effective integration requires knowledge of AI frameworks, infrastructure, and strategies for data management and security, including malware protection. Ultimately, CIOs should grasp both technical and strategic aspects of AI to lead successful implementations.

https://www.informationweek.com/data-management/what-cios-need-to-know-about-the-technical-aspects-of-ai-integration

AI and Virtualization Are Two Major Headaches for CIOs. Can Storage Help Solve Them Both?

CIOs face challenges with AI and virtualization due to data storage issues, heightened by VMware's recent licensing changes. Effective storage infrastructures are crucial for leveraging AI and improving virtualization performance. A shift from outdated HDDs to modern flash storage is necessary for better speed and efficiency, enabling companies to manage their enterprise data effectively. Lenovo emphasizes the need for a unified storage approach to streamline operations, enhance security, and adapt to fluctuating demands.

https://blocksandfiles.com/2025/05/22/ai-and-virtualization-are-two-major-headaches-for-cios-can-storage-help-solve-them-both/

Six Opportunities for CIOs in the AI Adoption Race

CIOs can seize six strategic opportunities in AI adoption:

  1. Enabler of Transformation: Shift from owning AI to orchestrating business alignment.
  2. Enterprise Integration: Upskill and harmonize IT and business for seamless collaboration.
  3. Responsible Innovation: Establish frameworks for safe, scalable GenAI implementation.
  4. Scaled AI Delivery: Move from isolated projects to a cohesive AI portfolio.
  5. Data Governance: Lead data strategy and ownership across the organization.
  6. Inspire Reinvention: Collaborate with leadership to guide AI-driven transformation.

Successful AI adoption requires top-level support and cross-functional teamwork, emphasizing AI as a strategic organizational change rather than a tech-only project.

https://knowledge.insead.edu/operations/six-opportunities-cios-ai-adoption-race

AI Drives Cyber Strategies, Security Execs Say

AI is now a primary concern for cybersecurity executives, surpassing traditional threats like ransomware. A recent report shows that 30% of leaders prioritize AI-related privacy and security issues. While many companies have adopted AI use policies, the technology's security solutions often underperform due to high false positive rates. Executives stress the importance of addressing basic vulnerabilities rather than focusing solely on AI risks, highlighting that staff training on common threats remains a cost-effective strategy for improving resilience.

https://www.cybersecuritydive.com/news/ai-security-risks-executives-survey/748664/

SolarWinds Security Chief on the Risks and Rewards of Being a CISO

Tim Brown, SolarWinds' CISO, discusses his experience during the 2020 Sunburst cyberattack by Russia. He emphasizes the importance of transparency and communication with stakeholders during crises, recounting how this approach helped maintain customer trust. Brown also reflects on the support from the CISO community during legal challenges with the SEC, advocating for proactive communication and preparation regarding cybersecurity liability. He warns about ongoing threats from Russia and rising concerns about China's capabilities. Brown remains optimistic about the future of cybersecurity, citing the industry's evolution and adaptability.

https://therecord.media/solarwinds-security-chief-tim-brown-interview

Transparency, Good Data and Documentation: How HR Can Navigate the EU AI Act

HR must adapt to the EU AI Act, which oversees workplace AI, particularly high-risk applications impacting health or employment. Transparency in data collection and vendor practices is crucial, as is understanding AI's risks and documentation requirements. DPIAs are essential for justifying AI use, ensuring compliance under GDPR and the AI Act. Effective anonymization of training data is critical, and HR should continuously evaluate AI tools for robustness, keeping ethical data handling at the forefront.

https://iapp.org/news/a/transparency-good-data-and-documentation-how-hr-can-navigate-the-eu-ai-act

Scroll to Top