Data protection issues are rarely far from the news. And as the recent ransomeware attack on Royal Mail in January illustrated, not only are they publicly embarrassing, they can be commercially disastrous both for the attacked organisation and its customers.