Survey suggests two in five SMEs ‘unprepared’ for new GDPR

21 Nov 2017

A survey carried out by the Data Compliance Doctors has suggested that two in five UK small and medium-sized enterprises (SMEs) – around 2.1 million businesses – are unprepared for the upcoming introduction of the new General Data Protection Regulation (GDPR).

The new GDPR is set to come into effect on 25 May 2018, and will strengthen the obligations on all businesses in regard to the safeguarding of individuals’ personal information. Businesses have been advised to review their data privacy and security practices ahead of the implementation of the GDPR.

The survey found that, of the 61% of UK firms that have started to prepare, over 600 hours have been spent getting businesses ready for the new data protection requirements.

It also revealed that a further 27% of firms have employed new staff members to help prepare for the introduction of the GDPR.

Lisa Chittenden, Data Compliance Doctor at the Data Compliance Doctors, commented: ‘Our survey has revealed a mixed bag in terms of GDPR preparation amongst SMEs.

‘Some have spent a lot of time and money to ensure they are in a good position come May 25, 2018. However, our figures show there are many thousands that have not even started, despite all the discussion and media stories in recent months. But, with six months to go, it’s not too late to get yourself up to speed.’