Each breach shows where controls or routines can improve. Data minimisation, access control and training reduce both the number and the impact of breaches.
What this means in practice
A useful test is to ask who would act on this tomorrow morning and what they would need. If the answer is unclear, the gap is organisational rather than technical, and that is usually the cheaper one to close.
Key actions
- Delete data you no longer need
- Review access rights regularly
- Train staff on the common scenarios
Next steps
Track breach trends and report them to management. Keep the first version short. A one-page routine that people follow beats a long document nobody reads.