---
title: "Reports Suggest Many Organizations Aren’t Ready for GDPR"
id: "42397"
type: "post"
slug: "reports-suggest-many-organizations-arent-ready-for-gdpr"
published_at: "2018-04-25T21:12:53+00:00"
modified_at: "2026-03-16T21:49:59+00:00"
url: "https://associationsnow.com/2018/04/25/reports-suggest-many-organizations-arent-ready-for-gdpr/"
markdown_url: "https://associationsnow.com/2018/04/25/reports-suggest-many-organizations-arent-ready-for-gdpr.md"
excerpt: "With the General Data Protection Regulation a month away from taking effect, two studies seem to suggest that plenty of organizations are unaware of the impact the regulation will have—or are freaking out about not being ready in time for..."
taxonomy_category:
  - "Governance"
taxonomy_post_tag:
  - "AssociationsNow"
  - "Compliance"
  - "data protection"
  - "Regulations"
  - "Technology"
taxonomy_content_format:
  - "Article"
taxonomy_role:
  - "C-Level"
  - "Director"
  - "Executive Team"
  - "VP"
taxonomy_persona:
  - "Executive Leadership"
---

[Home](https://associationsnow.com/)
 » [Articles](https://associationsnow.com/format/article/)
 » Reports Suggest Many Organizations Aren’t Ready for GDPR

A month out from one of the biggest regulatory changes in recent history, the word of the day about the European Union’s General Data Protection Regulation, which takes effect May 25, is “unsure.”

Earlier this month, a NetApp survey found that 76 percent of U.S.-based organizations that responded were worried about meeting the regulation’s deadline, while another 51.5 percent of U.S. respondents said they worry about damage to the organization’s reputation. Other concerns on the minds of U.S.-based respondents, [per the NetApp survey (opens in a new tab)](https://www.netapp.com/us/media/netapp-gdpr-survey-findings.pdf)
 [PDF], include revenue loss (50.2 percent), mistrust from customers (43.8 percent), mistrust from partners (39.7 percent), and company survival (40.4 percent).

A separate study from CompTIA, released Wednesday, found that just 13 percent of organizations said they were fully compliant with GDPR, while 52 percent of the 400 U.S. companies surveyed said they were either exploring if GDPR applied to their business, didn’t think it did, or were unsure of the impact.

Part of the problem, notes CompTIA President and CEO Todd Thibodeaux, is a lack of familiarity with the regulation—including a belief among some respondents that GDPR isn’t hitting for many months.

“Only one in four respondents claim to be very familiar with GDPR,” [Thibodeaux said in a news release (opens in a new tab)](https://www.prnewswire.com/news-releases/with-deadline-one-month-out-many-us-companies-not-ready-for-gdpr-comptia-survey-reveals-300635739.html)
. “Some believe it applies primarily to companies in the EU; others, only to large multinational corporations. Alarmingly, three in ten companies believe GDPR does not go into effect until the end of 2018.”

NetApp Vice President of Legal Elizabeth O’Callahan noted that GDPR standards generally follow best practices for many organizations, so the lack of clarity among respondents to its research was concerning.

“GDPR compliance requires organizations to know where their data is and to be able to classify data and control the lineage of data—all capabilities that are essential for data analytics initiatives designed to deliver accurate business insight,” [O’Callahan said in a news release (opens in a new tab)](https://www.businesswire.com/news/home/20180411005738/en/45-Days-76-U.S.-Organizations-Concerned-Meeting)
. “These capabilities are also fundamental to the success of other digital transformation and omnichannel marketing initiatives, including mobile networks, AI and machine learning, IoT, robotics, and more.”

The two surveys differed in some respects—the CompTIA findings suggested that most organizations weren’t aware of what was coming (only 22 percent of organizations had a plan, per that study), while NetApp’s research seemed to suggest a general sense of dread about not being able to hit the deadline.

But the results, in tandem, suggest one thing: Many organizations are not ready for the regulatory storm that’s not too far off in the distance.

(roobcio/iStock/Getty Images Plus)

[Ernie Smith](https://associationsnow.com/author/ernie-smith/)

Ernie Smith is a former senior editor for Associations Now.

[More articles by this author](https://associationsnow.com/author/ernie-smith/)

Tags: [#Compliance](https://associationsnow.com/tag/compliance/)
 [#data protection](https://associationsnow.com/tag/data-protection/)
 [#Regulations](https://associationsnow.com/tag/regulations/)
 [#Technology](https://associationsnow.com/tag/technology/)

**Stay Informed**

[Subscribe to our free newsletter](https://associationsnow.com/newsletter/)
, *Associations Now Daily News*, to find out what’s happening in the association world every business day.

## You Might Like

- [TemplateMembers onlyASAE GDPR Vendor LetterMay 11, 2018](https://associationsnow.com/2018/05/11/asae-gdpr-vendor-letter/)
- [TemplateMembers onlyMira Data Protection PolicyMay 11, 2018](https://associationsnow.com/2018/05/11/mira-data-protection-policy/)
- [VideoSmarter Board Management for Associations: An OnBoard ShowcaseJuly 24, 2026](https://associationsnow.com/2026/07/24/smarter-board-management-for-associations-an-onboard-showcase/)
- [PodcastAssociations Now Presents: Beyond the Tech Stack: How AI Is Changing the Association PlaybookOctober 29, 2026](https://associationsnow.com/2026/10/29/associations-now-presents-beyond-the-tech-stack-how-ai-is-changing-the-association-playbook/)

## Comments

**Comments are for ASAE members.** [Learn more about comments on this site.](https://associationsnow.com/comments/)

[Log in](https://associationsnow.com/login?redirect_to=https%3A%2F%2Fassociationsnow.com%2F2018%2F04%2F25%2Freports-suggest-many-organizations-arent-ready-for-gdpr%2F%23comments)
 to your member account or [join ASAE](https://my.asaecenter.org/select-a-membership-type/)
!
