GDPR Benchmark Survey

All companies doing business in the European Union ("EU") as well as companies that control or process personal data of residents or citizens of the EU must be compliant with the General Data Protection Regulation (GDPR) by May 2018. Are you ready?
How prepared is your firm? Take this readiness survey to benchmark your perceived preparedness of your organization today, against your peers.
The benchmark should take less than 2 minutes to complete.

Does your company currently have a strategy in place for the General Data Protection Regulation? (Select one)*
- Yes, we have built a network of individuals responsible for implementing a GDPR strategy across the organization.
- Yes, but we are still building out a network of individuals to implement a GDPR strategy across the organization.
- Yes, but we have not identified a network of individuals to implement a GDPR strategy across the organization.
- No, but we are interested in creating one.

Thank you for taking the GDPR Benchmark Survey!
The journey toward GDPR compliance and the path you take tomorrow depends upon where your business is today.
Our study results show that when it comes to GDPR compliance, firms find challenges across technology, processes, and governance. Our findings also highlight that firms are tackling single requirements of GDPR separately, and they struggle to reconcile and execute their initiatives in a more comprehensive, risk-based, compliance framework.
There are four critical components to GDPR success:
- Data protection officer (DPO) leadership — your organization has named a DPO to drive an advanced privacy program.
- GDPR strategy — your organization has built a risk-based approach towards implementing a GDPR strategy across the organization.
- Confidence beyond technology — your company is not only confident with the technologies put in place, but also with the polices and processes.
- Investing for the long haul

	Not involved at all	Somewhat involved	Key contributor, significant involvement	Final decision maker; owns the entire process; highly involved	Don’t know / does not apply
Human resources
Security and risk
Privacy
Legal
Procurement / third-party vendor management
Marketing and other business units
Customer experience
CIO
Infrastructure and operations
Other