Expert Urges Developing a Data Protection Mindset in the Workplace Beyond Awareness Month

For many employees, data protection may be viewed as a set of rigid policies to follow or systems to maintain. However, for Shelly-Ann Walker, data protection executive at the JN Group, it is a daily responsibility that requires awareness and accountability.

“Data protection isn’t just about systems and policies, it’s about giving people control over their own information,” Ms Walker said, reflecting on the theme for this year’s Data Privacy Month, “Take Control of Your Data”.

“Whether it’s a customer sharing personal details or an employee handling customer records, each of us has a role in deciding how data is used, stored and shared. It’s about empowerment as much as it is about protection,” she noted.  

Ms Walker stressed that data privacy requires ongoing attention, noting that weaving protective habits into everyday routines, even outside of the office, can help sustain momentum.

“At work, this means simple routines like carefully checking email recipients before sending emails, securing documents and locking computer screens when stepping away. Personally, it means thinking carefully about what we post online, which apps we give access to our information or even how we speak about clients, customers and other employees with others and outside of work. By making these small, consistent actions part of everyday life, data protection becomes second nature.”

Emphasising the need for both individuals and businesses to be more mindful of data protection, Ms Walker said, “Simple habits make a big difference.”

“For businesses, it means limiting access to personal data, providing regular reminders and training and encouraging staff to report concerns early. Individually, this can be as simple as removing or destroying shipping labels on courier packages before discarding boxes, as those labels often contain names, addresses and contact details. Data protection does not have to be complicated. It starts with being mindful,” she said.

According to the JN Group data protection executive, central to cultivating a strong data protection mindset in the workplace is recognising that personal information belongs to real people.

She said when employees genuinely understand the personal impact of data protection, it changes how they handle information. Customers are also more likely to trust organisations that treat their data with respect and care.

“A strong data protection mindset starts with remembering that behind every piece of personal information is a real person; a customer, a colleague or a client whose trust we hold. I always encourage employees to pause and ask themselves, ‘If this were my own information, how would I want it to be handled?’.”

She said this mindset matters even more as digital tools and remote work become more integral to daily business operations, and where personal information may be accessed outside of traditional office spaces.

“Protecting data is really about respecting people and the trust they place in us,” she said. “Internally, it strengthens accountability, as employees understand that their daily actions have real consequences for real people. Over time, this approach builds a reputation for integrity, professionalism and respect.”

Beyond Data Privacy Month, Ms. Walker encourages organisations to integrate data protection into daily workplace conversations, ensuring that employees think about privacy as part of their routine. She added that when business leaders consistently demonstrate that protecting personal data is a priority, it reinforces the message that privacy is a shared value across the organisation.

“Organisations can make data protection a normal part of everyday conversations, including during team meetings, onboarding sessions, internal updates and policy discussions, such as remote work practices. Using real-life examples helps employees understand why privacy matters, not just what the rules are.”