The survey split respondents into businesses and charities. Among those that have started to prepare:
- 36% of businesses and charities have changed their cyber security practices;
- 21% of businesses and 10% of charities have invested in additional staff training; and
- 6% of businesses and 12% of charities have installed, changed or updated antivirus or anti-malware software.
Larger organisations more prepared
As you would expect, larger organisations were more likely to be aware of the GDPR. Of organisations with 250 or more employees, 80% of businesses and 75% of charities had heard of the GDPR.
In contrast, awareness among small and medium-sized organisations ranged from 49%–66% for businesses and 47%–53% for charities.
The finance and insurance (79%), information or communications (67%) and education (52%) sectors have the highest awareness. The finance and insurance sector is also the most likely to have put in place measures to comply with the GDPR, with 54% having done so.
Construction (25%) and the production and manufacturing (27%) sectors are among the least aware of the GDPR. However, the least prepared sector is retail and wholesale, with only 13% of organisations having started.
For more information contact us to help you with this journey.