Olina Sokratous: When a request to hand over customer data arrives, where in your corporate structure does this decision sit?

2 minutes ago

2 min read

In a period of change and new challenges, O Group of Companies remains a trusted partner with all-round expertise, earning confidence through results, while bringing the innovation and technological insight of a new generation to help clients move forward with greater security and confidence. In our latest article, Olina, Managing Director of O Group of Companies, Strategist for Business Growth and Privacy Law, explores where privacy decisions really sit within a corporate structure, and why strategy starts from the trunk, not the branch.

This month, Revolut confirmed that it handed customer passports, verification selfies, home addresses, and full transaction histories, including Bitcoin activity, to fraudsters posing as a government agency.

Someone sent a request from a legitimate government email domain, and it was fulfilled.

The extent of the problem is that the incident reportedly targeted high-net-worth individuals, and the Register reports self-proclaimed culprits demanding 10,000 Bitcoin. That combination matters: a Bitcoin transaction history, a passport scan, an occupation, and a home address in one file is exactly the input for "wrench attacks," where criminals skip the cryptography and go straight to the person.

Most of the analysis has focused on incident response: how the request was detected, how quickly the sender was blocked, who was notified. That is examining the branch while ignoring the trunk. Incident response is the branch, where the failure becomes visible. Corporate structure is the trunk, the foundations, where the capacity to choose is formed.

Most corporate structures are built with remarkable care around tax and capital, and the decisions that shape trust are often left to workflow. Incident response shows how a company reacts. Corporate structure decides whether it has the power to choose in the first place, coupled with ethics.

So here is a simple audit for founders, CEOs, and boards: when a request like this arrives, where in your corporate structure does the decision sit? If you don't have an answer, you don't have a strategy.

Olina Sokratous

Managing Director | Strategist for Business Growth and Privacy Law

O Group of Companies

Σας άρεσε το άρθρο;