Thrive on AI: Data Risks
We’ve said it before and it’s only getting louder: AI is reshaping how businesses work. From chatbots and smart analytics to automated content and decision-making tools, AI is helping smaller firms punch well above their weight. But with that power comes responsibility. As AI use grows, so do the risks around data privacy, and under GDPR, getting it wrong can mean serious fines and lasting reputational damage.
Understanding GDPR For AI Usage
GDPR is designed to protect the personal data of individuals within the European Union and the UK, applying strict rules to businesses that collect, process or store this data. Small businesses in Gibraltar that use AI tools must follow the seven key GDPR principles:
1. Lawfulness, fairness and transparency
2. Purpose limitations
3. Data minimisation
4. Accuracy
5. Storage limitation
6. Integrity and confidentiality
7. Accountability
In simple terms, AI should only process the data it actually needs, and businesses must be upfront about how they’re using it. Transparency is key here, your customers and employees should know how their data is handled, and in some cases, they must give explicit consent before AI tools can be used. And don’t forget to check where the AI platforms you are using store your data, because if it’s outside of the EU or UK, you will likely need to have extra safeguards in place to stay compliant.
The Risks of AI Tools For GDPR
AI tools can be incredibly useful, but they also come with hidden compliance risks. Many small businesses unknowingly risk GDPR breaches by using free or third-party AI platforms like ChatGPT, transcription services, or automated content generators. These tools often require large amounts of data input, which could be stored, processed, or even used to train future AI models without your knowledge.
How this Could Work in Practice
Here’s a hypothetical scenario to illustrate some of the pitfalls you’ll need to be aware of. Imagine a legal firm testing a free AI-powered tool to transcribe client meetings, summarise key points, and draft legal documents. It streamlines admin tasks and speeds up workflows. However, it also raises serious GDPR concerns. What happened?
In this scenario, the AI tool transcribes a confidential client meeting in real time, picking up sensitive details about a potential legal strategy. It summarises key points, extracts follow-ups, and then generates a draft contract. Where the risks lie:
1. Sensitive data handling
The AI tool, being free and cloud-based, may store data on overseas servers with limited transparency about who accesses it. GDPR requires firms to process data lawfully and transparently. In this example, the firm hasn’t told the client AI tools will be used. This could breach consent rules.
2. Cross-border data transfer
If the tool stores data in the US or other non-GDPR jurisdictions, this could be a violation unless strict safeguards are in place. Key questions arise:
– Where is the data stored?
– Is it encrypted?
– How long is it retained?
– Can it be deleted on request?
If the firm can’t answer these confidently, it risks non-compliance.
3. Data rights and retention
GDPR gives clients the right to access, correct or delete their data. Free AI tools rarely offer this level of control. In some cases, data may even be used to train the AI, putting legally privileged information at risk.
4. AI-generated outputs and liability
In this case, the AI also drafts a contract. If it misinterprets something or leaves out critical details, the resulting document could be flawed. Without human review, there’s a risk of legal or reputational fallout.
Lessons (hypothetically) learned
Firms considering similar tools should:
– Use GDPR-compliant services
– Choose providers with servers in the UK or EU and clear privacy policies.
– Gain informed consent
– Update client onboarding materials to explain how AI may be used.
– Review AI-generated content
– Never send legal documents to clients without human oversight.
– Control data storage and deletion
– Ensure you can remove data on request and avoid using tools that retain or repurpose it.
AI can be a powerful advantage for small businesses, but this case study is a timely reminder that not all tools are created equal. Businesses need to know who they are buying from, where data is stored, and how compliance is managed, especially in data-sensitive sectors like legal, finance and healthcare, where trust is everything.
AI raises the bar on data protection. The challenge is to innovate without cutting corners. By understanding GDPR obligations, choosing trusted providers, and drawing on guidance from bodies like the GRA, businesses can use AI confidently and responsibly. As data protection rules continue to evolve alongside AI, staying informed and proactive will be key to staying competitive and compliant.
OTHER
With its largely service-based economy, you'd be forgiven for thinking that Gibraltar didn't have to deal with the problem of toxic waste, perhaps more commonly seen in countries reliant on manufacturing, mining and even agriculture. However, every gaming company, insurance firm, fintech organisation, retailer, restaurant, and literally every other business on the Rock is potentially responsible for producing a particularly nasty waste byproduct - e-waste.
During a recent and very long overdue catch up with my friend Trina, I had one of those ‘Aha moments’. To be fair, as someone who spends a lot of time interviewing experts, these moments happen to me a lot, but this one was different. In the 20 years Trina and I have been friends, she’s developed marketing strategies for global brands including Coca Cola, Virgin Atlantic, Nestlé and IKEA . Impressive stuff, but it’s what she’s working on now that really got me thinking…Taking inspiration from the military and politics, Trina and her business partners set up The Competitive Wargaming Team and now deliver secret, scenario-based ‘corporate war rooms’ for senior leaders designed to predict and outmaneuver competitor moves.
Whether you’re building a business from the ground up or hoping to grow an existing operation, having a strong business development strategy is the foundation of success. But real, sustainable growth doesn’t come from chasing the next big thing, it comes from getting the essentials right. So, what are the fundamentals you can’t afford to ignore? In my view, this starts with something I call the “Holy Trinity” of small business marketing...
When stakeholder conversations become difficult, most organisations focus on communication. Kerstin Andlaw argues the real issue runs deeper. It is not what we say, but how we stay in the relationship when pressure rises. In complex environments, the ability to work with tension, not avoid it, is what separates transactional engagement from true collaboration.
In business, we often concentrate on the what and how of an enterprise.
We all have bad days, right? In business, that can mean we don’t bring our A-game to work and perhaps our service slips. Maybe a dish takes too long to reach a table or a staff member sounds distracted at the till. This could lead to negative Google Reviews or on ‘that’ Facebook group that […]
Who doesn’t love a good office gossip? Hushed conversations by the coffee machine, knowing glances across the office, colleagues who "just thought you should know" – it’s all just harmless banter, right? Not quite. While gossip might seem like an inevitable part of office life, the reality is much less entertaining. Workplace backbiting can destroy trust, drain morale, and impact team productivity. Few people understand this better than Norwegian psychotherapist Glenn Rolfsen. With over two decades of experience in psychotherapy, Glenn has dedicated his career to helping businesses tackle workplace negativity head-on. His innovative "Gozzip" method has been transforming office cultures worldwide, earning him recognition at TEDx talks and WHO conferences.
Forget everything you know about online shopping—eCommerce is evolving fast. While giants like Amazon and eBay once ruled, a new wave of platforms such as TikTok Shop, Shein, and Temu are reshaping the industry. But beneath the flashy deals and viral trends lies a growing conversation about sustainability, waste, and the hidden costs of convenience.
When you’ve been running your own business for a while, you know what works, and it’s easy to rely on the skills that got you to where you are. Chances are, you’re comfortable doing things in a certain way, and your team knows what to expect from your leadership style.
Since 2007, Earth Hour has been known as the biggest hour for the planet as millions of people switch their “lights off” as a symbolic action for the environment
The Treaty between the EU and the UK over Gibraltar is finally giving us some clarity, and yet, it also reminds us just how much sits outside our control. The finer details will take months to surface. Political tides may shift. Promises will be tested by practicalities. Every day, we face issues beyond our reach: new legislation, competitor actions, market trends, customer behaviour, staff turnover, illness, family responsibilities, global events. All of it lives in what Stephen Covey calls the Circle of Concern - things we care about, but cannot directly change. The more we fixate on them, the more frustration can grow.
For many businesses, standing out from the crowd in an already crowded marketplace is a mammoth task. But for Fresquita one of the ways they tackled this issue was with highly creative packaging.
When it comes to ideation in business, there’s no one-size-fits-all approach. Every business, team, and leader has their own way of generating and refining ideas. Whether it’s through structured brainstorming sessions, casual conversations, or solo reflection, the goal is to unlock creativity and find solutions. We’ve asked four GFSB members to share how they approach ideation in their fields. As you read, think about how you generate ideas and remember that sometimes, the best results come from trying something new.
One of the most dangerous things anyone can say in business is, "We've always done it this way." This phrase doesn't age well and puts businesses at risk. "We've always done it this way" can quickly look like "flogging a dead horse." This doesn't always mean that businesses need to change everything. Some things, like great service, never go out of fashion. But when sales start to slow down, it's always a good idea to consider taking a new approach. Rebranding a product, service, or entire enterprise can be part of this process. But rebranding should never be taken lightly.
Thrive catches up with Nick Pitaluga TEP, Managing Director of Gibraltar Trust & Corporate Services Limited - “GTCS”. From starting out as a messenger to leading his firm through a major merger, Nick talks about the importance of stepping outside your comfort zone and offers inspiration for anyone carving their own niche.
Mental health issues affect us all. How we manage our daily stresses and anxieties have an impact on our relationships, how we perform in our job and the workplace environment, and our outlook on life. Becoming self-aware of what affects us, managing how we respond to triggers and using tools to help us work through them, are all part of our journey towards MENTAL FITNESS, which is how we should be positively defining it.
How to: Brainstorm
If you’ve been dreaming of starting your own business, you’re not alone. Data from the UK’s Office for National Statistics (ONS) revealed that the annual number of companies registered is edging closer to the one million mark, that’s up by 75,000 in 2022 which itself was 30,000 higher than in 2021. Whether it's following a passion, aiming for financial independence, or breaking free from the 9-5 grind, every entrepreneurial journey begins with one crucial thing: a solid idea. But coming up with that perfect idea can be tough. This is where brainstorming comes in—it’s the creative springboard that can help you turn your business dreams into reality.
Stepping into a leadership role can be exciting. It’s a chance to shape the future and lead a team to success. But with a leadership role comes a new level of responsibility. You’re suddenly the person others look to for direction and answers, and it’s your role to create a workplace where they can thrive - while also being accountable for their work. And that isn’t always an easy balancing act. Leadership is a learning curve - an eternal one at that. By focusing on a few key behaviours and techniques, you can set yourself on the right path to lead well, build a great high performing team and help your business grow.
Finding time to sit down with a book can feel like a luxury sometimes. We seem to be pulled in all sorts of directions, yet many of us still want to learn and stay exposed to new ideas. Podcasts have filled part of that gap. They’re accessible, conversational and easy to consume while commuting or […]
After teaching in schools for 18 years I decided to take the plunge and embark on a self-employed life. Driven by my passion for teaching children with special educational needs I set out to discover alternative ways to make education accessible to all. My vision was to have the individual in mind, with their own strengths and challenges, and with that came the birth of ‘edYOUcation Clare Francis’; bringing the YOU into learning.