GDPR:acultureofnon-compliance?Numbersofevidence-basedenforcementeffortsnoyb.euExecutiveSummaryGDPRcompliancegap.InMay2018,theGeneralDataProtectionRegulation(GDPR)firstappliedtotheprocessingofpersonaldataintheEU.Whileitoncepro-misedtousherinaneweraofstricterdataprotectionthroughstrictenforcementandhighfines,thepracticalexperiencesuggeststhatthedailypracticestilllacksbehinditspoliticalpromises.Whatwasmissinguntiltoday:objectiveevidenceoncomplianceandevidence-basedenforcementandcompliancestrategies.Evidence-basedcomplianceefforts.Inotherareasofthelaw,extensivesociolo-gical,psychological,andpracticalevidencewasgeneratedtodevelopeffectiveandefficientenforcementandbringlawandpracticeclosertogether.SuchevidenceislargelymissingwhenitcomestoGDPRcompliance.Forthisreason,noybcon-ductedasurveythatissupposedtoserveasastartingpointforevidence-basedcomplianceapproaches.Inoursurvey,wetargeteddataprotectionprofessionals–peoplewhoareattheforefrontofcomplianceeffortsandhaveuniqueknowledgeoftheinternaldecisionprocessesofcontrollersandprocessors.TheaimofthisquestionnairewastogainadeeperinsightintotheorganisationaldriversthatleadtomoreGDPRcompliance,toadvanceknowledgeonthemostimportantinternalandexternalfactors,andtoderivekeytakeawaysforfutureeffectiveinternalcom-plianceworkandenforcementefforts.74.4%assumerelevantviolationsatana...
发表评论取消回复