Prepare for when, not if

"Banks got robbed because they hold money, companies get robbed because they hold data. So plan for when it happens, not if it happens."

That's an idea I shared with a number of organisations during a series of sessions around data & ethics.

But why am I sharing this today? Because this morning I woke up to a message from The North Face indicating that they suffered a data breach and some of my data might be impacted.

Even though the news is 💩 , it was "good" to read that a process was in place. They shared:

• What happened and how they reacted. Authorities were involved and the breach was submitted to the data governing authority.
• What information could be impacted. It looks like they are applying data minimisation principles to reduce the risk of WHEN a breach happens.
• How this could impact me. -A point of contact to raise questions.

Prepare for when, not if.