Independent Research and Policy Advocacy

Effective Enforcement of a Data Protection Regime

This paper presents ideas for a new approach to enforcement of a data protection regime, based on risk-based supervision and the use of a range of responsive enforcement tools that could be deployed in advance of a breach to prevent it, or after a breach to mitigate the effects.