Most firms are still not compliant with GDPR despite looming deadline, says study

A large majority of businesses is still unprepared for GDPR, says study

Just seven per cent of global businesses are thought to be fully compliant with GDPR, according to a new study from analytics firm SAS.

Meanwhile, two million drivers are set to be affected by the DVLA's new GDPR rules.

The research, which explores how firms have been getting ready for the law, reveals that 93 per cent of firms have not met all of the demands posed by GDPR. This is the despite the fact that it comes into force next month.

Less than half of respondents (49 per cent) said they will be compliant before the May 25th deadline. European companies seem to be more prepared for the law, though.

Currently, 53 per cent of EU and 54 per cent of British organisations are expected to meet the deadline, compared to just 30 per cent in the United States.

"Despite the long run-up to GDPR, the vast majority of UK organisations still don't have processes in place to manage their data in compliance with the new rules," said David Smith, head of GDPR technology at SAS UK & Ireland.

"At this point, senior leadership needs to take ownership of getting the whole company on board, from IT to operations, to make sure that all personal data is accurately located and appropriately handled."

While the study shows that most businesses are struggling to meet the deadline, 93 per cent said they are working on plans to become compliant.

Many respondents view GDPR as a good thing, with 84 per cent of respondents saying they expect GDPR to improve their data protection abilities. And 68 per cent believe that the law will improve customer trust.

In other findings, 58 per cent of respondents said they have developed a structured plan to become GDPR-compliant, but 15 per cent of US respondents and 4 per cent of EU respondents said they have no such plans at all.

Smith added: "There's a great opportunity contained within the challenge of GDPR. Organisations that gain greater control and understanding of their data will be better able to provide their customers with the services they want, in the manner that they want them.

"Those companies that can innovate through GDPR will gain a significant advantage over competitors who get stuck in the long grass of compliance."

Some technology experts have described GDPR as a security threat.