Blog
Finding and protecting personal data on the Mac — for schools, IT teams and DPOs.
EnglishWhere Student Personal Data Hides on a School's Macs — and How to Find It
Where student personal data accumulates on a school's Macs and shared drives, why it matters under GDPR, and a practical, on-device way to find and minimise it.
EnglishSpotlight Isn't Enough for GDPR — What Finding Personal Data on a Mac Actually Takes
Spotlight finds files by name and keyword. Finding personal data for GDPR needs pattern detection, OCR and archive-aware scanning. Here's the gap — and how to close it on-device.
SvenskaVar göms elevernas personuppgifter på skolans Macar — och hur hittar du dem?
På en skolas Macar och nätverksdiskar samlas elevdata i åratal – personnummer, betyg, hälsonoteringar. Här är var det göms, varför det är en GDPR-risk, och hur du hittar det på plats.
EnglishGDPR Offboarding on a Mac — Wiping Personal Data Before the Machine Moves On
When staff leave or a Mac is reassigned, personal data rides along in files, Downloads and old accounts. A practical offboarding checklist to find and clear it before handover.
EnglishHow to Answer a DSAR in 30 Minutes Instead of Three Days
A data-subject access request is only slow if you don't know where the person's data lives. Here's how to prepare so a DSAR becomes a scan-and-review, not a scramble.
EnglishShadow Data — the Copies of Personal Data You Forgot You Made
Most GDPR risk on a Mac isn't the original file — it's the forgotten copies. Where shadow data comes from, why it's dangerous, and how to find and collapse it.
EnglishRight to Erasure on a Mac — How to Actually Delete Someone Under Article 17
When someone invokes their right to be forgotten, "delete the record" isn't enough. A practical method for finding and erasing every copy of a person's data on a Mac.
EnglishData Mapping in an Afternoon — a Small-Team Method That Actually Gets Done
Data mapping doesn't need a consultant or a six-week project. A pragmatic, on-device method a small team can finish in an afternoon and keep current.
EnglishThe File Server Is Where Your GDPR Risk Actually Lives — Auditing SMB Shares from a Mac
Laptops get the attention, but the shared drive is where personal data really accumulates. A practical guide to auditing SMB and NAS shares from a Mac — scope, permissions, what to look for, and what to do with what you find.
EnglishHow to Audit 200 Macs for Personal Data Without Buying a DLP Platform
Enterprise DLP is expensive, slow to deploy and often overkill. A practical, staged approach for Mac admins to find personal data across a fleet using MDM, sampling and on-device scanning.
EnglishYour Backups Are a GDPR Blind Spot — Time Machine, Snapshots and the Right to Erasure
You deleted the file. Your backup didn't. How Time Machine, APFS snapshots and server backups quietly keep personal data alive for years — and what a defensible erasure process actually looks like.
EnglishProduction Data on Developer Macs — The PII Leak Nobody Reviews
Engineers pull production dumps to debug, and the data never leaves. Why developer laptops are the least-audited, highest-density store of real customer data in most companies — and how to fix it without slowing anyone down.