Civil Society Organisations and Journalists increasingly face data security risks from surveillance, breaches, and misuse, yet many lack the tools and capacity to respond. This session focuses on practical strategies, peer learning, and collaborative problem-solving. It opens with a framing presentation on common vulnerabilities and simple, adaptable data protection practices. Participants then work in small groups on real-world scenarios such as securing sensitive community data, responding to breaches, and creating internal data governance policies. Facilitated discussions ensure balanced input from both technical and community-focused participants. A “world café” rotation encourages cross-pollination of ideas across regions, sectors, and organization types, ensuring grassroots groups, large NGOs, and rights defenders and journalists all contribute. Insights will be captured through collaborative note-taking and a visual “data protection map.” The session concludes with co-developed actionable takeaways to support implementation and ongoing dialogue. Overall, the session strengthens CSOs’ / journalists collective resilience and fosters a shared culture of responsibility for data protection.