Organisations increasingly recognise that ESG (Environmental, Social, and Governance) is crucial for long-term value creation beyond financial metrics. Often forgotten about, is the focus that regulatory authorities place on data privacy and data security as crucial ESG topics. Companies who fail to incorporate privacy compliance measures into their ESG programme are at risk of reputational damage, reduced valuations, and regulatory sanctions for data mishandling.