Despite the yearslong build up to the EU’s General Data Protection Regulation (GDPR), which came into force on May 25, many organizations are still behind in their compliance efforts. And while much attention has been paid to corporations’ compliance shortcomings, a recent Wolters Kluwer survey found that law firms are also lagging in meeting GDPR mandates.

Conducted among 74 medium (26-100 staff members) to large (100-plus) law firms, the survey found that only 47 percent of law firms said they were “fully prepared” to meet the GDPR’s requirements. While 16 percent said they were “somewhat prepared,” more than a third, 37 percent, said they have not prepared specifically for the GDPR at all.