The threat of fines has done more to focus boardroom attention on data privacy and effective cyber-security than any other measure, says the head of the U.K.’s data regulator.

Elizabeth Denham, the U.K.’s information commissioner and chair of the Global Privacy Assembly, a body that aims to coordinate best practice and enforcement among data regulators worldwide, believes without the threat of significant fines, executives would simply not bother thinking of privacy—and particularly cyber-security—as a risk issue boards should be concerned about.

Neil Hodge is a freelance business journalist and photographer based in Nottingham, United Kingdom. He writes on insurance and risk management, corporate governance, internal audit, compliance, and legal...