While European companies operate under strict data protection guidelines such as GDPR, and soon NIS 2, a recent analysis reveals serious security gaps in the handling of access data. The Business Digital Index reveals worrying cybersecurity practices.