Privacy Survey Details Jump in Data Mapping, Privacy Audits

Here are five takeaways from the recently published IAPP-EY Annual Privacy Governance Report released last week while we were in Austin at the Privacy. Security. Risk. 2018 conference hosted by the International Association of Privacy Professionals. The survey targeted privacy professionals from across IAPP with an online survey invitation sent to subscribers of the IAPP Daily Dashboard email. They received 550 completed surveys. Here are five areas of note:

Data Mapping Up

The number of privacy teams conducting data mapping and privacy audits jumped in 2018 compared to 2017, with 68% of teams doing data mapping and 64% conducting data mapping (vs. 55% in 2017 for both figures). The jump in these numbers should come as no surprise as those with a mature privacy program started privacy audits around their compliance efforts and organizations beginning to understand what data they are collecting, using and sharing started data mapping.

Vendor Management Driving Privacy Efforts

Demands from business partners for GDPR compliance are driving the expansion of privacy practices as approximately 1/4 of companies have changed processors because of GDPR. B2B businesses are actually more likely to have privacy professionals working full-time than B2C businesses, according to the report. Although most businesses conducting vendor management are relying on assurances given by the processor in the data processing addendum to their agreement, more organizations are sending a questionnaire or requiring documentation of a third-party audit.

Privacy Technology Automation Coming

57% of companies are investing in privacy technology. Although the report does not identify where companies are spending, but much of this spending will probably be in automation as 56 percent of organizations are attempting to perform manual data mapping and more than half of respondents are trying to complete the data subject access rights process manually, according to the survey.

Privacy Compliance Cost around $3 Million for GDPR

Organizations are spending an average of $3 million to achieve GDPR compliance. However, many businesses are not there yet. 56% of respondents say their organization is not yet compliant with GDPR. About 19% of those currently non-compliant believe that they will never achieve full GDPR compliance.

California Consumer Privacy Act will be Big

The IAPP-EY report indicates that the CCPA or a pre-emptive federal law by Congress will “likely have a significant business impact” given the amopunt that companies are spending on GDPR. The survey didn’t appear to ask any questions directly about the initiative, so we will probably have to wait until this winter or next spring to get companies that have begun to poll data related to California privacy.

If your organization is looking to improve your data privacy practices, call Clarip at 1-888-252-5653 for a demo of our enterprise privacy software.

EU GDPR
– GDPR Compliance
– Consent Management Software
– GDPR Data Mapping Software
– DSAR Portal
– GDPR Text

ePrivacy
– Cookie Scanner
– Cookie Banner Generator
– Cookie Consent Manager
– ePrivacy Regulation

California Consumer Privacy Act
– CCPA Summary
– CCPA vs GDPR
– CCPA Privacy Software
– CCPA Webinar

Other Blog Posts with Survey Data:

Survey: Half of UK Small Business Owners Confused by GDPR
IAPP Survey on Data Mapping, DPIAs, ROPAs & DSARs after GDPR
KPMG Survey: Consumers Expect Businesses Will Protect Their Data Privacy
Poll: Data Privacy Top Issue for Companies
Harris Poll Finds Less than Half Trust Big Tech with Personal Data
Survey: 88% of Irish Businesses Optimistic About GDPR Compliance
Forrester Study: Customer Privacy is a Competitive Differentiator for 75% of Businesses
Survey: Data Privacy Top Concern for Potential Customers and Business Partners
Survey: Majority of Fintech Users Want Control Over Third Party Access to Financial Data
Survey: Only 35% of Companies Can Show GDPR Compliance
Survey: Majority of UK Consumers will Exercise Data Subject Access Rights in Next Year