{"id":24649,"date":"2019-01-24T15:33:11","date_gmt":"2019-01-24T15:33:11","guid":{"rendered":"https:\/\/packetstormsecurity.com\/news\/view\/29749\/Data-Security-Is-A-Major-Issue-In-GDPR-Compliance.html"},"modified":"2019-01-24T15:33:11","modified_gmt":"2019-01-24T15:33:11","slug":"data-security-is-a-major-issue-in-gdpr-compliance","status":"publish","type":"post","link":"https:\/\/www.threatshub.org\/blog\/data-security-is-a-major-issue-in-gdpr-compliance\/","title":{"rendered":"Data Security Is A Major Issue In GDPR Compliance"},"content":{"rendered":"
<\/div>\n

The EU’s General Data Protection Regulation<\/a> (GDPR) sent organizations across Europe into a tailspin over their data storage and privacy procedures, and months on, only 59 percent of companies believe they are GDPR-compliant.<\/p>\n

Data breaches are commonplace, credit monitoring is fast looking like an excellent service to be adopted by the average individual, and regulators, more than ever, are holding businesses to account when they do not take reasonable steps to protect the information they store.<\/p>\n

\n

More security news<\/span><\/h3>\n<\/div>\n

This month, Google was made an example of by French data protection watchdog CNIL, which fined the tech giant \u20ac50 million<\/a> for allegedly railroading users into consenting to processes they did not understand.<\/p>\n

It is unlikely that Google will be the last business to come under the microscope when it comes to GDPR. The UK’s Information Commissioner’s Office receives upwards of 500 calls a week<\/a> in relation to data security and privacy since the new laws came into effect on 25 May 2018.<\/p>\n

On Thursday, Cisco released its 2019 Data Privacy Benchmark Study<\/a> which explored how the new privacy regulations have impacted the enterprise.<\/p>\n

The study is based on information provided by over 3200 security professionals in 18 countries across a variety of industries. When asked about their organization’s readiness for GDPR, the results were not encouraging.<\/p>\n

See also:\u00a0<\/strong>DarkHydrus abuses Google Drive to spread RogueRobin Trojan<\/a><\/p>\n

\n<\/section>\n

In total, 97 percent of respondents said that GDPR applied to their firms. Only 59 percent of businesses said they are meeting “all or most” GDPR stipulations today, although a further 29 percent expect to reach this level within a year.<\/p>\n

Cisco says that the effort is often worth it when it comes to data breaches. Companies which implement GDPR-compliant security measures are less likely to be breached than those which are not compliant — 74 percent vs. 89 percent — and when a data breach does occur, fewer records are impacted on average \u00a0–79,000 vs. 212,000 — and system downtime is also generally shorter.<\/p>\n

In addition, the average cost of a data breach is lower. The study estimates that only 37 percent of GDPR-compliant firms had a data breach-related loss of over $500,000 last year, in comparison to 64 percent of the least GDPR-ready.<\/p>\n

CNET:\u00a0<\/strong>Russia opens civil case against Facebook, Twitter over data laws<\/a><\/p>\n

When asked about the major challenges GDPR poses, respondents said data security, training, and privacy-by-design requirements were some of the most significant areas in which reaching GDPR standards were the most difficult to implement, as below:<\/p>\n