The unprecedented challenges of the COVID‑19 pandemic are still with us, not only in terms of the grim toll the virus has taken on individuals and families, but also in terms of wider implications for how people and societies live and interact. Data protection regulation emerged as a key regulatory pressure point during the pandemic in respect of a host of issues, from the collection of medical, biometric and contact tracing data, through to data protection and cybersecurity aspects of remote working as workers increasingly stayed home.