One thing I’ve found helpful when explaining the various compliance requirements for organizations through its stakeholders is the aspect of legal implications for non compliance. Laws are not suggestions to be disregarded at will. Therefore, the sanctions therein are to deter persons and stakeholders from not complying. Sometimes the cost is so high and the business would suffer serious loss hence the adherence.

It is important to highlight the risks of non-compliance to different stakeholders. (1) For most organizations the specter of regulatory investigations and fines is a critical consideration. (2) It is also important to inform the stakeholders of the reputational loss they would face as modern consumers are very sensitive on how organizations handle their data when they are making purchasing decisions. (3) It is also a good idea to bring up specific cases in which regulatory authorities banned or suspended certain tech products or their sales till they are compliant to established data privacy standards. (4) Finally, it can also be helpful to show the business operational benefits of some privacy controls such as data governance.

Consider including information on how the laws and rules may change and the need to put parameters in place but to also be flexible with the changing regulations.