Since the introduction of the General Data Protection Regulation
(GDPR) in 2018, people are becoming increasingly aware of the
rights they have in respect to how organisations use and collect
their data.
More and more we're seeing individuals trying to hold
organisations to ransom for data breaches, even where those data
breaches are trivial. Believing these trivial data breaches to be
major infractions, many people are initiating complaint procedures
against the organisations in question.
A recent example
Here's an example we came across recently. A developer was
in discussion with a client about the potential purchase of a
property. In the course of doing business, the developer contacted
the potential purchaser's mortgage broker. Upon hearing of the
communication, the potential purchaser alleged that they had not
given permission for the developer to have direct contact with the
mortgage broker and that this was therefore a breach of how their
data was
