Log in or become a subscriber

HR professionals should expect to take an increasingly active role in how organisations approach data protection, both when planning a response to potential breaches and in the aftermath of an event, a specialist lawyer says.

Up to 80% of the decisions an organisation faces when there's a breach can be made in advance, but by the time they're needed, most response plans have been forgotten, or they're outdated, according to Dentons partner Michael Park.

What usually happens, Park tells HR Daily, is that someone in IT calls and says, "Hey, there's something a bit funny going on with the server, we're just looking into it". Anywhere from 10 minutes to 10 hours later, they'll say, "It looks like somebody's gained access to the system, we're not quite sure what's involved yet".

A "classic" example is that an external party has accessed a mailbox and downloaded all the emails in it, and the organisation has to then "work out what that means"...