The deadline for companies handling European Union citizens’ data to be compliant with the General Data Protection Regulation (GDPR) was May 25. However, according to a recently released survey from Deloitte, company compliance programs are not yet fully mature enough to handle the full scope of the GDPR, let alone new regulations that may mirror its guidance in other jurisdictions.
The survey, taken on June 22 of more than 490 compliance professionals, found that just 35 percent felt they could demonstrate a “defensible position” on GDPR compliance. An additional 33 percent said they should be compliant in the coming months, while 12 percent said they were waiting a “take and see” approach. The remainder said they didn’t know or the question wasn’t applicable.
