Six months after the EU’s General Data Protection Regulation (GDPR) went into effect, enterprises are finding that privacy regulation is costing more than anticipated. Forty-one percent of respondents to a Verasec survey said that their companies are paying more than anticipated to comply.

Even when costs were accurately estimated, compliance is still challenging; 59 percent of respondents said their companies were not in compliance with GDPR, even six months after the May 25, 2018 deadline.