The deadline for GDPR enforcement is finally here. More than two years after its passage by the European Parliament in 2016, organizations worldwide now must comply with its requirements for data protection, processing, consent, and privacy.

Unfortunately, if survey results are to be trusted, many organizations—perhaps as many as one in three—will not be ready. Many organizations have conducted research into the topic, with ISACA.org’s April 2018 study finding this 1/3 result being one of the most recently published efforts.