“You must partner with the business and learn from them – and always use more carrot than stick if you are going to be effective,” David Blonder, BlackBerry’s global data protection officer, said in a Q&A with Forbes of the company’s compliance efforts with the EU’s General Data Protection Regulation. “People need to be engaged and invested in the process, believe that their actions matter and understand they can have a larger organisational impact. You need to communicate that you want to facilitate the objectives of the business while still protecting them, the company and mitigating risk. This is the balance that all legal and compliance professionals must strive to achieve.”