Nicola Wood, Senior Independent Director at the Information Commissioner’s Office (ICO), urges institutions to think about data protection law. She points out that that the potentially significant monetary impact of poor data protection practices will have caused organisations to reassess their rating of this risk. She says that boards should be asking questions about the data-related risks they are willing to take that could ultimately the loss of their customers’ trust, confidence and business.