Here we discuss where organisations can improve their data protection practices given the turbulence we experienced in moving services online during 2020.