Key Takeaways:

• Data protection, which encompasses data governance, data privacy and cybersecurity, should be considered as part of the board’s oversight of risk and strategy
• The board’s responsibilities related to data protection include identifying director(s) or advisor(s) with the appropriate skills and experience, stating explicit accountability within the board, keeping management accountable and ensuring compliance with laws and regulations.
• Board best practices in their oversight of data protection include good data governance hygiene, frequent and robust communications, expertise, and continuing education.

Resources:

• The Board’s Role in Data Protection (practice aid)
• Board Oversight of Cybersecurity (publication and resources)
• BDO Digital 2022 Cybersecurity Month Resources
• BDO Digital Governance, Risk & Compliance