GDPR Research update: 76% of European organisations are not compliant

GDPR research update: 76% of European organisations are not compliant

From 25 May 2018 onwards, European citizens are being put back in control of their own data. But will consumers really be in control? How well prepared are European organisations for the major change marked by the entry into force of the GDPR?

iWelcome puts organisations throughout Europe to the test, performing a two-monthly assessment on GDPR-compliance within customer interaction among 89 organisations in Europe. A total of 7 countries are included in the research, namely: the Netherlands, the United Kingdom, Germany, France, Switzerland, Spain and Sweden. The verticals in scope are Insurance, Utilities, Media & Publishing, Travel & Services, Retail/E-tail & Consumer Products and Non-Profit.

After the second measurement in January 2018, the results are still staggering:

  • Only 23.6% is on track while 76.4% (!) of all organisations are uncompliant in most areas (compared to 80% in the November 2017 measurement);
  • Out of 7 countries, Germany scored highest on GDPR-compliance with a score of only 5.76 out of 10. In the first round the Netherlands scored best;
  • Retail/E-tail & Consumer Products is the winning vertical.

About the research

iWelcome’s research is being conducted during the period from October 2017 towards May 25th, from a consumer’s perspective, by registering online. Whenever the registration process doesn’t provide clear findings, the organisation’s privacy policies are being checked.

Due to the nature of the research, only the variables that are relevant for customer interaction have been tested. Underlying arrangements within organisations (for example designating a Data Protection Officer) have not been measured. The ongoing research will monitor the state of compliance of European organisations every two months.

GDPR readiness report - iWelcome