Data protection officers point to problems applying GDPR

IMY has now published the report Data protection in practice, which is based on a survey of data protection officers in over 800 organisations. The report provides an indication of the conditions under which data protection is applied in organisations required to have data protection officers.

Less than 4 in 10 of data protection officers judge that their own organisation works continually and systematically with data protection. Only half feel that they are able to explain the importance of data protection issues to management.

“This is concerning. Systematic and continual data protection requires both knowledge of GDPR and commitment from the organisation’s management,” says Andrea Amft, an analyst at IMY.

The survey shows also that half of the officers are not included in a timely manner. Every fourth lacks allocated time for data protection and only every other feels that the allocated time they do have is sufficient.

“It is important that data protection officers are provided the necessary conditions and both sufficient and appropriate resources to allow them to fulfil their assignment within their organisations. This includes providing officers enough time for their tasks and access to necessary information,” says Amft.