The compliance question you're allowed to ask


1. Spot the Problem

What everyone sees.

Most people treat compliance as background noise. An email about a policy update. A banner about cookies. A line in your contract nobody reads. You skim it, accept it, move on.
​
That's fine, until something goes wrong. A data leak. A charge you didn't agree to. A change to your job that nobody explained properly. Suddenly you need to know what you're actually entitled to, and you don't.

2. Find the Root

What's actually happening.

The problem isn't that you ignored the policy. It's that nobody ever told you compliance rules exist for your benefit, not just the company's.
​
Every privacy notice, every terms update, every workplace policy is really a list of promises. What data they'll hold. How long. What you can ask for. What happens if they get it wrong. You've been treating these as admin. They're actually your terms of protection.

3. Make It Click

Here's what to do instead.

Compliance literacy isn't about knowing the law. It's about knowing what you're owed.
​
You don't need to read GDPR. You need to know you can ask a company what data they hold on you, and they have to answer. You don't need to know your employer's full security policy. You need to know who to ask when something feels off.
​
That's the whole shift. From reading policies to using them.

Root Test

Think of one company or employer you deal with regularly. Could you name one thing you're entitled to ask them, right now, about your data or your rights? If not, that's the gap. Not knowledge of the law. Knowledge of your own position.


Try This Week

Pick one company you use often. Find their privacy contact or data request process, usually a line at the bottom of their privacy policy, and actually look at what you could ask them. You don't have to send anything. Just confirm the option is there, and that you'd know how to use it. And if you want, ask them to send you a copy, see what they know of you. Promise you'd be surprised.


Root Reading

​noyb.eu, the European Center for Digital Rights founded by Max Schrems. It publishes plain-language guides on exactly this: what your data rights actually mean in practice, and how to use them. Worth bookmarking, not reading cover to cover.

If this changed how you think, share it with one person who'd appreciate it too. 🙂

The root is always the problem.
The solution is a simple click.
- Dre

What problem should I tackle next? I read to all feedback so reply to this email and I'll help out!

600 1st Ave, Ste 330 PMB 92768, Seattle, WA 98104-2246
​Unsubscribe · Preferences​

Root Click

A 2-minute read every week that challenges one accepted way of thinking, gets to the root of the real problem, and leaves you with one idea that clicks.

Read more from Root Click

1. Spot the Problem What everyone sees. Companies create things that can affect people without always understanding the information and risk sitting underneath them. A new product, software system, payment process or customer experience can touch personal data, money, intellectual property and even automated decisions. Yet the customer never thinks about whether any of this is safe. They shouldn't have to. 2. Find the Root What's actually happening. The problem isn't that companies don't have...

1. Spot the Problem What everyone sees. Technology keeps making life easier. One app opens your storage unit.One app holds your boarding pass.One app unlocks your house.One app gives you access to your bank. Everything feels faster, simpler and more convenient. Until it doesn't. Your battery dies.Your phone breaks.The app crashes.The server goes offline. Suddenly, convenience disappears... and so does your ability to do basic things. 2. Find the Root What's actually happening. The problem...

1. Spot the Problem What everyone sees. An endless, bottomless pit of laws and requirements that you have to comply with and no single central source of information. No matter the industry or the jurisdiction every business has a list of requirements that they just have to follow, regardless if the rules make sense or not. The worst part of this is not trying to prove that you're doing the best you can to ensure you're in line with the law. The worst part is not even being aware of what you...