The above is the title of the talk that I gave at this years Data Protection Conference run by the Irish Computer Society.  It was a great event with some excellent speakers ranging from practitioners, to legal experts and the Data Protection Commissioner Billy Hawkes.  Bruce Scheier also addressed the conference via a video link.

I focused my talk on what you should think about when (not if) you have a security breach.  The slides are below.