The GDPR and cybersecurity: it affects us all

A few days ago, the Agence nationale des titres sécurisés (ANTS) suffered a major cyberattack. Millions of pieces of personal data were compromised, exposing users to the risks of identity theft and phishing. This real-life example serves as a reminder that even systems considered robust are not immune to hacking. In Saint Martin, both professionals and individuals must exercise caution. At the conference held in Grand Case on 23 April, Alain Richardson, president of the ITSEE, emphasised, ‘Digital technology is no longer just a tool; it is our working environment. Our data is circulating everywhere, all the time. The question is no longer “Are we affected?”, but “Are we ready?”’. The GDPR thus appears not as an administrative constraint, but as a framework that provides security. For its part, cybersecurity is no longer merely a technical convenience; it determines the ability to avoid or manage a crisis.

Rapidly growing threats

Frédéric Lionetti, Data Protection Officer (DPO) at ITSEE, outlined the fundamentals of the GDPR, which has been in force since 2018. It applies to “all organisations processing personal data”, regardless of their size, including associations, micro-enterprises and public authorities. Lieutenant-Colonel Hugues Loyez, commander of the gendarmerie in Saint-Barthélemy and Saint-Martin, emphasised the sharp rise in cyberattacks. “There is a real underground data market, organised around highly specialised players. Dedicated trading platforms, marketplaces and, above all, ready-made phishing kits and ready-to-use scams. We now have hackers as young as 14 or 15 who download phishing kits,” explained the lieutenant-colonel. The Saint-Martin gendarmerie has a specialist unit capable of responding rapidly to assist victims. Nevertheless, to prevent and avoid cyberattacks, there are simple steps one can take, such as using strong passwords, keeping software up to date, and remaining vigilant regarding suspicious messages.