Information about us is increasingly interesting to those who wish to understand our persona, our interests, and the context within which we lives our lives. Regulation follows with the aim to maintain our privacy in modern times. However, such regulation doesn't prescribe the detail of the processes needed to support the intended objectives of regulation. Nor, do we understand the requirement of the technologies which may assist in the enforcement and management of information processes to support regulation. This paper explores recent multidisciplinary research which has been anticipating the changing regulatory landscape with regard to data protection and provides some insight into how we may implement supporting technologies and processes using risk based approaches.