EU GDPR – May 2018 Is Just 10 Months Away

By Thomas Schneck • July 7, 2017 at 5:00 PM
GettyImages-485311086-810790-edited.jpg

The GDPR is going to make creating a data governance framework a wild ride for many companies, whether they’re in the EU or not. And complying with the EU GDPR requires both pragmatism and courage.

The first step in understanding how to proceed with EU GDPR compliance is to understand where your organization currently stands. A new AIIM report – Understanding GDPR Readiness in 2017 – provides meaningful direction in creating a data governance framework and benchmarks on where other organizations stand. 

This kind of practical reference is important. Many organizations are ill-prepared for the EU GDPR, and the clock is ticking.

Consider the following:

  • Only 23% of organizations feel they will be “fully prepared” for GDPR by May 2018. 
  • 55% say that “there is a lack of GDPR ready tools and applications which might prevent us to be ready in time.”
  • 33% say that “privacy rules are changing faster than we can change our systems.”
  • Currently, only 30% have named a Data Protection Officer.
  • Only 47% believe that C-suite executives in their organization are aware of the non-compliance implications of the EU GDPR.

Clearly there is room for improvement. When it comes to policies that define compliance and security for information, most organizations rate their performance poorly.

Type of Information

% rating “above average” or “excellent”

PII stored on premise

35%

PII in transit (to and from websites, office locations, etc.)

23%

Cloud stored content

38%

Laptops

34%

Mobile phones and tablets

25%

Removable Storage Devices

28%

Personal Identifiable Information (PII) in Big Data Systems

28%

PII stored in files and documents

21%

PII stored in other countries

26%

PII Collection within your country

38%

PII collected from other countries outside of the EU

22%

According to IAPP-EY Annual Privacy Governance Report 2016, “For privacy and data protection professionals, 2017 may prove to be a watershed year.” The AIIM survey reinforces this: 89% of organizations believe that the EU GDPR requires a holistic approach consisting of governance, training, technology, process and security.

Creating a data governance framework to meet challenges in the new GDPR cannot be left until the last minute – the time to get serious is now.

New Call-to-action

Are you ready to get serious about taking your business into the digital age? Schedule your free personalized demo of DocuWare today. 

 

Topics: Compliance, Security

Comments