Many Global Executives Don't Believe GDPR Compliance is Relevant to Their Business
Many global business decision makers are unaware of the implications of the forthcoming General Data Protection Regulation (GDPR), as well as other compliance regulations like PCI-DSS and ISO27001/2, with one in five admitting they do not know which regulations their organization is subject to. This is according to the 2017 Risk:Value report, commissioned by NTT Security.
The survey of 1,350 non-IT executives across 11 countries, reveals that just four in ten (40%) respondents globally believe their organization will be subject to the EU GDPR. Perhaps of most concern is the one in five (19%) who admit they don’t know which compliance regulations they are subject to. In the UK, just 39% of respondents currently identify GDPR as a compliance issue, and 20% admit they don’t know, while those outside of Europe are even less aware. Just a quarter of business decision makers in the US, 26% in Australia, and 29% in Hong Kong believe they are subject to the GDPR, despite the fact it will apply to any business holding or collecting data on European citizens.