While the European Union’s General Data Protection Regulation (GDPR) has been in effect for a little over a year now, results from a new survey conducted by law firm McDermott Will & Emery and the Ponemon Institute show that businesses in China and Japan are still lagging behind in their data privacy compliance efforts.

However, it may not stay that way for long. Mark Schreiber, a partner at McDermott Will & Emery, thinks entities in China and Japan may have been holding back to see how other global players like the EU or the U.S. have responded to the GDPR.