UK businesses are not ready for GDPR

Organisations are not allocating resources necessary to cope with the legislation

Europe

Companies are ill-prepared for the GDPR, with limited resources being allocated to preparing for and complying with the new legislation, it has been claimed.

The preliminary results of a survey carried out by the Centre for Information Policy Leadership (CIPL) and AvePoint show that most businesses are not yet compliant with many of the core principles of the General Data Protection Regulation, even though they are concerned about its impact.

Advertisement - Article continues below

According to the results of the survey that have been received so far, the majority of respondents (57 per cent) said discussions regarding the allocation of additional resources, be it headcount, budget or other, had begun, but no decisions had yet been made.

23 per cent, however, said no additional resources will be made available for GDPR compliance.

"I think there is a disconnect between what companies actually need to do and what they're preparing to do right now," Dana Simberkoff, chief compliance and risk officer at AvePoint, told journalists in central London this morning.

"Companies that I think are in the best position to respond to GDPR right now which ... are companies that are already heavily regulated, probably are the closest to having a programme that would be ready to go (such as financial services). But that does not represent the vast majority of even large companies," Simberkoff said.

Advertisement
Advertisement - Article continues below
Advertisement - Article continues below

An additional cause for concern is that many businesses are unsure as to whether elements of the legislation, such as the right to data portability, apply to them. There are also many businesses that simply do not know what data they hold or where it is all located.

Simberkoff suggested that privacy impact assessment tools could help businesses prepare for the GDPR before it is too late, such as its own APIA system, as well as other free resources available through the CIPL and the International Association of Privacy Professionals (IAPP).

The GDPR comes into force in May 2018.

Featured Resources

Navigating the new normal: A fast guide to remote working

A smooth transition will support operations for years to come

Download now

Putting a spotlight on cyber security

An examination of the current cyber security landscape

Download now

The economics of infrastructure scalability

Find the most cost-effective and least risky way to scale

Download now

IT operations overload hinders digital transformation

Clearing the path towards a modernised system of agreement

Download now
Advertisement

Recommended

Visit/security/ransomware/356292/university-of-california-gets-fleeced-by-hackers-for-114-million
ransomware

University of California gets fleeced by hackers for $1.14 million

30 Jun 2020
Visit/security/cyber-security/356289/australia-announces-135b-investment-in-cybersecurity
cyber security

Australia announces $1.35 billion investment in cyber security

30 Jun 2020
Visit/cloud/cloud-security/356288/csa-and-issa-form-cybersecurity-partnership
cloud security

CSA and ISSA form cyber security partnership

30 Jun 2020
Visit/business/policy-legislation/356215/senators-propose-a-bill-aimed-at-ending-warrant-proof-encryption
Policy & legislation

Senators propose a bill aimed at ending warrant-proof encryption

24 Jun 2020

Most Popular

Visit/laptops/29190/how-to-find-ram-speed-size-and-type
Laptops

How to find RAM speed, size and type

24 Jun 2020
Visit/security/vulnerability/356295/microsoft-patches-high-risk-flaws-that-can-be-exploited-with-a
vulnerability

Microsoft releases urgent patch for high-risk Windows 10 flaws

1 Jul 2020
Visit/laptops/34623/how-to-connect-one-two-or-more-monitors-to-your-laptop-including-usb-type-c
Laptops

How to connect one, two or more monitors to your laptop

29 Jun 2020