Every January 28, the world celebrates Data Protection Day, also known as "Data Protection Day" or "Privacy Day". Created to raise awareness among citizens, businesses, and institutions of the importance of digital privacy, this day is a reminder that data protection is now a critical issue, for individuals and professional organizations alike.

At a time of soaring cyberattacks, tightening regulations, and massive digitalization, it is essential to understand the origin of this event, its objectives, and above all the concrete measures to adopt to protect your data.

Why January 28? The origin of Data Protection Day

The date of January 28 is no coincidence: it marks the anniversary of Convention 108, signed on January 28, 1981 under the aegis of the Council of Europe.

This convention is:

  • the first binding international treaty on the protection of personal data
  • the founding text of the modern philosophy of privacy protection
  • a solid foundation that has inspired many laws, including the GDPR

In 2006, the Council of Europe officially established this day as an annual awareness event. Since then, it has gone global: outside Europe, it is known as Data Privacy Day and brings together government bodies, businesses, experts, and associations to promote a culture of data protection.

In France, the AFCPD is responsible for organizing the day.

Why has this day become indispensable?

Data protection has never been more topical.
A few striking facts underline the urgency:

  • Cyberattacks rank among the top 5 global risks according to the World Economic Forum
  • Over 90% of malware now travels through encrypted connections (HTTPS), making it harder to detect
  • The volume of ransomware attacks jumped by 150% in one year
  • Attacks now target businesses, government agencies, and individuals alike

In this context, January 28 is an opportunity to remind everyone of the need to strengthen their cybersecurity practices.

Your legal obligations: what the GDPR says

Organizations that process personal data must comply with strict obligations:

1. Security obligation

Implement technical and organizational measures to protect data (encryption, access control, backups, logging…).

2. Accountability obligation

Be able to demonstrate compliance with data protection rules at any time.

3. Data Protection Impact Assessments (DPIA)

Required when processing presents high risks to rights and freedoms.

4. Appointing a DPO

Mandatory for certain organizations or large-scale processing.

5. Transparency

Clearly inform individuals about the data collected, how it is used, who receives it, and how long it is retained.

The main risks of poor data protection

Failing to secure your information can lead to:

  • Financial losses (ransoms, business interruption, complex restoration)
  • Reputational damage (loss of clients, contract terminations)
  • GDPR fines of up to 4% of global revenue
  • Loss of strategic data essential to the company’s operations

For an SME or a healthcare facility, a serious incident can jeopardize business continuity.

 

10 tips to protect your personal data

  1. Train your employees. Most data loss is caused by human error. By training them, you take the time to explain best practices and thus avoid problems as much as possible.
  2. Avoid phishing. Online tests are available for training: https://phishingquiz.withgoogle.com/. A fun way to train and learn more about protecting personal data.
  3. Use strong passwords, different for each account, and do not share them with your colleagues. Best practice is to use numbers, special characters, and letters, combining uppercase and lowercase. Have a unique password and don’t hesitate to use more than ten characters.
  4. Update your applications. Applications and operating systems are regularly updated to fix certain security vulnerabilities as well as certain bugs. By making sure to install updates regularly, you protect all your devices and therefore your data.
  5. Install a firewall. It will filter your network traffic, both incoming and outgoing.
  6. Install antivirus software. It scans files and programs before allowing them to be opened or run, blocks malicious websites, blocks dangerous applications and programs on your device, … Antivirus software does not guarantee 100% security, but it still provides good protection.
  7. Lock your computer when you leave your desk, even for 5 minutes: data can be stolen in no time. Even among colleagues, you are not immune to theft. Outsiders may also manage to get into the building. If you don’t lock your computer, you run the risk of data theft.
  8. Set up a VPN to connect to the network anonymously and securely. A VPN is recommended if you use public Wi-Fi (for example, in a café).
  9. Be wary of unknown external hard drives and USB flash drives. They may contain viruses! Always scan them before opening the documents they contain.
  10. And of course, back up your data. Choose off-site backup, such as cloud backup, with a long version history in case of file deletion or undetected viruses.

Why certified backup is indispensable

Even an exemplary organization can fall victim to an attack, an error, or a physical incident.

Choosing a backup solution that is:

  • French
  • ISO 27001 certified
  • and HDS certified for health data

guarantees:

  • Confidentiality and advanced encryption
  • Fast restoration in the event of an incident
  • GDPR compliance and control over data flows
  • Storage in France, meeting local requirements
  • Dedicated assistance and support

Kiwi Backup meets precisely these criteria, enabling organizations to protect their data over the long term.

Checklist: are you ready for Data Protection Day?

  • I use strong passwords and a password manager
  • My software and systems are up to date
  • I use two-factor authentication
  • I train my employees
  • I have antivirus software, a firewall, and a VPN on public networks
  • I stay alert to phishing
  • I lock my devices whenever I step away
  • I don’t use unknown devices
  • I have set up off-site backup
  • I know my GDPR obligations