UK businesses are not ready for GDPR

Organisations are not allocating resources necessary to cope with the legislation

Europe

Companies are ill-prepared for the GDPR, with limited resources being allocated to preparing for and complying with the new legislation, it has been claimed.

The preliminary results of a survey carried out by the Centre for Information Policy Leadership (CIPL) and AvePoint show that most businesses are not yet compliant with many of the core principles of the General Data Protection Regulation, even though they are concerned about its impact.

According to the results of the survey that have been received so far, the majority of respondents (57 per cent) said discussions regarding the allocation of additional resources, be it headcount, budget or other, had begun, but no decisions had yet been made.

23 per cent, however, said no additional resources will be made available for GDPR compliance.

"I think there is a disconnect between what companies actually need to do and what they're preparing to do right now," Dana Simberkoff, chief compliance and risk officer at AvePoint, told journalists in central London this morning.

"Companies that I think are in the best position to respond to GDPR right now which ... are companies that are already heavily regulated, probably are the closest to having a programme that would be ready to go (such as financial services). But that does not represent the vast majority of even large companies," Simberkoff said.

An additional cause for concern is that many businesses are unsure as to whether elements of the legislation, such as the right to data portability, apply to them. There are also many businesses that simply do not know what data they hold or where it is all located.

Simberkoff suggested that privacy impact assessment tools could help businesses prepare for the GDPR before it is too late, such as its own APIA system, as well as other free resources available through the CIPL and the International Association of Privacy Professionals (IAPP).

The GDPR comes into force in May 2018.

Featured Resources

BCDR buyer's guide for MSPs

How to choose a business continuity and disaster recovery solution

Download now

The definitive guide to IT security

Protecting your MSP and your customers

Download now

Cost of a data breach report 2020

Find out what factors help mitigate breach costs

Download now

The complete guide to changing your phone system provider

Optimise your phone system for better business results

Download now

Recommended

Google’s about to push everyone into two-factor authentication
Security

Google’s about to push everyone into two-factor authentication

6 May 2021
Defense Dept. expands vulnerability disclosure program to all publicly accessible defense systems
ethical hacking

Defense Dept. expands vulnerability disclosure program to all publicly accessible defense systems

5 May 2021
Security researchers take control of a Tesla via drone
ethical hacking

Security researchers take control of a Tesla via drone

5 May 2021
Best free malware removal tools 2021
Security

Best free malware removal tools 2021

5 May 2021

Most Popular

Dell patches vulnerability affecting hundreds of computer models worldwide
cyber security

Dell patches vulnerability affecting hundreds of computer models worldwide

5 May 2021
16 ways to speed up your laptop
Laptops

16 ways to speed up your laptop

29 Apr 2021
KPMG offers staff 'four-day fortnight' in hybrid work plans
flexible working

KPMG offers staff 'four-day fortnight' in hybrid work plans

6 May 2021