Lines
Lines

Thrive on AI: Data Risks

We’ve said it before and it’s only getting louder: AI is reshaping how businesses work. From chatbots and smart analytics to automated content and decision-making tools, AI is helping smaller firms punch well above their weight. But with that power comes responsibility. As AI use grows, so do the risks around data privacy, and under GDPR, getting it wrong can mean serious fines and lasting reputational damage.

Understanding GDPR For AI Usage
GDPR is designed to protect the personal data of individuals within the European Union and the UK, applying strict rules to businesses that collect, process or store this data. Small businesses in Gibraltar that use AI tools must follow the seven key GDPR principles:
1. Lawfulness, fairness and transparency
2. Purpose limitations
3. Data minimisation
4. Accuracy
5. Storage limitation
6. Integrity and confidentiality
7. Accountability

In simple terms, AI should only process the data it actually needs, and businesses must be upfront about how they’re using it. Transparency is key here, your customers and employees should know how their data is handled, and in some cases, they must give explicit consent before AI tools can be used. And don’t forget to check where the AI platforms you are using store your data, because if it’s outside of the EU or UK, you will likely need to have extra safeguards in place to stay compliant.

The Risks of AI Tools For GDPR
AI tools can be incredibly useful, but they also come with hidden compliance risks. Many small businesses unknowingly risk GDPR breaches by using free or third-party AI platforms like ChatGPT, transcription services, or automated content generators. These tools often require large amounts of data input, which could be stored, processed, or even used to train future AI models without your knowledge.

How this Could Work in Practice
Here’s a hypothetical scenario to illustrate some of the pitfalls you’ll need to be aware of. Imagine a legal firm testing a free AI-powered tool to transcribe client meetings, summarise key points, and draft legal documents. It streamlines admin tasks and speeds up workflows. However, it also raises serious GDPR concerns. What happened?
In this scenario, the AI tool transcribes a confidential client meeting in real time, picking up sensitive details about a potential legal strategy. It summarises key points, extracts follow-ups, and then generates a draft contract. Where the risks lie:

1. Sensitive data handling
The AI tool, being free and cloud-based, may store data on overseas servers with limited transparency about who accesses it. GDPR requires firms to process data lawfully and transparently. In this example, the firm hasn’t told the client AI tools will be used. This could breach consent rules.

2. Cross-border data transfer
If the tool stores data in the US or other non-GDPR jurisdictions, this could be a violation unless strict safeguards are in place. Key questions arise:
– Where is the data stored?
– Is it encrypted?
– How long is it retained?
– Can it be deleted on request?
If the firm can’t answer these confidently, it risks non-compliance.

3. Data rights and retention
GDPR gives clients the right to access, correct or delete their data. Free AI tools rarely offer this level of control. In some cases, data may even be used to train the AI, putting legally privileged information at risk.

4. AI-generated outputs and liability
In this case, the AI also drafts a contract. If it misinterprets something or leaves out critical details, the resulting document could be flawed. Without human review, there’s a risk of legal or reputational fallout.

Lessons (hypothetically) learned
Firms considering similar tools should:
– Use GDPR-compliant services
– Choose providers with servers in the UK or EU and clear privacy policies.
– Gain informed consent
– Update client onboarding materials to explain how AI may be used.
– Review AI-generated content
– Never send legal documents to clients without human oversight.
– Control data storage and deletion
– Ensure you can remove data on request and avoid using tools that retain or repurpose it.

AI can be a powerful advantage for small businesses, but this case study is a timely reminder that not all tools are created equal. Businesses need to know who they are buying from, where data is stored, and how compliance is managed, especially in data-sensitive sectors like legal, finance and healthcare, where trust is everything.

AI raises the bar on data protection. The challenge is to innovate without cutting corners. By understanding GDPR obligations, choosing trusted providers, and drawing on guidance from bodies like the GRA, businesses can use AI confidently and responsibly. As data protection rules continue to evolve alongside AI, staying informed and proactive will be key to staying competitive and compliant.

Lines
Small Lines

SHARE THIS

Lines

OTHER

Welcome to the fifth edition of Thrive magazine. Too often the narrative around business focuses on success and, in my view, we forget to talk about failure. That’s why we lead this edition with EPIC FAILS by Katie Buller—because understanding what doesn’t work is just as important as what does.

The world of work is undergoing a significant transformation, driven by the accelerating capabilities of Generative AI. While robots taking over our jobs might be a sci-fi trope, AI’s ability to learn, create, and automate tasks is undeniably impacting various industries. Generative AI is the umbrella term used to describe the type of AI that can create new content and ideas. This can include text, images, music, code and other types of content. We are now seeing how powerful this tool can be. But is this a threat or a powerful tool waiting to be harnessed? We set out to find out, what does the use of Generative AI look like in Gibraltar?

The Treaty between the EU and the UK over Gibraltar is finally giving us some clarity, and yet, it also reminds us just how much sits outside our control. The finer details will take months to surface. Political tides may shift. Promises will be tested by practicalities. Every day, we face issues beyond our reach: new legislation, competitor actions, market trends, customer behaviour, staff turnover, illness, family responsibilities, global events. All of it lives in what Stephen Covey calls the Circle of Concern - things we care about, but cannot directly change. The more we fixate on them, the more frustration can grow.

Pets are like family, right? As a proud cat dad, I’d actually go further and say that they are family. Over the years, I have spent my well-earned money on (many) toys, beds, treats and vet bills for my two feline furballs Nacho and Drake. And I am not alone. According to a recent Fortune Business Insight report, the global pet care market was valued at a massive £171.78 billion in 2022 and is projected to grow from £180.06 billion in 2023 to £269.29 billion by 2030.

Success doesn’t just happen; it’s built on a strong foundation of preparation, clarity, and taking consistent action. Whether you’re launching a new business, taking your current side-hustle full-time, or looking to scale in a competitive market, having the right plan in place is essential.

Whether you’re an ebook tapper or traditional page turner, there are thousands of books that can make you better at business. Áine Panter, Head of the School of Business at the University of Gibraltar has curated a list of must-reads that will inspire, inform, and equip you for success.

My name is John Hayes, and I'm a really busy guy. Busy procrastinating most of the time. You wouldn't believe how many unessential tasks I had to complete before sitting down and writing this article. Those sales reports and emails don't check themselves. Yep, I've been busy. Busy doing nothing. We've all had one of those days where we feel like we've been incredibly "busy" - but can't quite put our finger on what we actually accomplished. Maybe we spent three hours answering emails, another two fiddling with a spreadsheet no one asked for, and another hour in a meeting that could have been an email or WhatsApp message. At the end of it all, the to-do list somehow got longer, not shorter.

With its largely service-based economy, you'd be forgiven for thinking that Gibraltar didn't have to deal with the problem of toxic waste, perhaps more commonly seen in countries reliant on manufacturing, mining and even agriculture. However, every gaming company, insurance firm, fintech organisation, retailer, restaurant, and literally every other business on the Rock is potentially responsible for producing a particularly nasty waste byproduct - e-waste.

Thrive catches up with Nick Pitaluga TEP, Managing Director of Gibraltar Trust & Corporate Services Limited - “GTCS”. From starting out as a messenger to leading his firm through a major merger, Nick talks about the importance of stepping outside your comfort zone and offers inspiration for anyone carving their own niche.

We all have bad days, right? In business, that can mean we don’t bring our A-game to work and perhaps our service slips. Maybe a dish takes too long to reach a table or a staff member sounds distracted at the till. This could lead to negative Google Reviews or on ‘that’ Facebook group that […]

Eran Shay's journey is emblematic of the modern entrepreneur. A self-confessed ‘out-of-the-box’ thinker, he swapped a successful corporate career and a senior role at Deloitte to pursue his own projects and business opportunities.

Starting and running a small business is rewarding but comes with its fair share of challenges. The path of entrepreneurship is often characterised by immense dedication, long hours, and tough decisions. As a small business owner, you're not just responsible for the operations and growth of your company and team, but also for your own wellbeing. 

In an increasingly digital work environment where we have more emails, WhatsApp messages & interruptions than ever before, many business leaders started looking at ways of alleviating the stress that comes with this increased workload. Relaxing the dress code and letting your team dress down and wear in more casual clothing is one way of doing this….Or is it?

When you’ve been running your own business for a while, you know what works, and it’s easy to rely on the skills that got you to where you are. Chances are, you’re comfortable doing things in a certain way, and your team knows what to expect from your leadership style.

Artificial Intelligence promises unprecedented opportunities for small business owners in Gibraltar. As the digital landscape faces constant evolution, understanding AI becomes not just beneficial but essential for businesses aiming to thrive in 2024. In this article, we aim to demystify the complexities surrounding AI, offering an approachable guide to its fundamentals, history, and practical applications for businesses, providing you with the knowledge to embrace this technology confidently. 

Finding time to sit down with a book can feel like a luxury sometimes. We seem to be pulled in all sorts of directions, yet many of us still want to learn and stay exposed to new ideas. Podcasts have filled part of that gap. They’re accessible, conversational and easy to consume while commuting or […]

As the CEO of a specialist security business called Paladin Defence and close protection operative/ private security contractor, I have experienced security threats of all types since 1990. From opportunistic personal attacks to targeted organised commercial crime, I feel there is a lot more we should be doing to defend and protect ourselves. Understandably, Gibraltar is considered to have a relatively low crime rate; but what are the realistic threats and risks to small businesses in our corner of the Mediterranean?

When stakeholder conversations become difficult, most organisations focus on communication. Kerstin Andlaw argues the real issue runs deeper. It is not what we say, but how we stay in the relationship when pressure rises. In complex environments, the ability to work with tension, not avoid it, is what separates transactional engagement from true collaboration.

Fair recruitment is based on the principle that candidates are judged on their ability to do the job rather than influenced by factors such as an applicant’s gender, religion, ethnicity, or any other quality unrelated to their skills and expertise. As the Founder of Rock Learning and the Co-Founder of the ‘Count me In’ DEIB Conference, I have developed a deep understanding of the topic and how small businesses can implement inclusive hiring practices.

Running a small business is an exciting journey, but without proper bookkeeping, it can quickly become overwhelming. Imagine trying to make critical business decisions without knowing how much money is in your account or being caught off guard by a hefty tax bill because records weren’t kept up to date. Good bookkeeping isn’t just about staying compliant; it’s about gaining control over your business, planning for growth, and avoiding costly mistakes.