The outbreak of COVID-19 has seen a rapid and unprecedented change in the way businesses are using technology. This has thrown up a host of opportunities for scammers and hackers seeking to take advantage of weaknesses in cyber security, therefore increasing the risk of data breaches. It also introduces new considerations and challenges for organisations in all sectors to ensure compliance with the General Data Protection Regulation (GDPR). The risk is particularly acute for organisations which are heavily reliant on processing personal data, such as those in the consumer facing sectors of travel and leisure, retail and hospitality.