Security News > 2022 > August > Most companies are unprepared for CCPA and GDPR compliance

As of June 30, 2022, 91% of companies across all verticals, states, and business size that must comply with CCPA are still unprepared to meet CCPA requirements, according to CYTRIO. Further, 94% of companies that must comply with GDPR are ill prepared to meet the GDPR compliance requirements.

"The majority of companies that must meet CCPA, CPRA, and GDPR compliance have a long way to go, and with enforcements looming, many are exposed to compliance enforcement fines and private-right of-action," said Vijay Basani, CEO, CYTRIO. "Through our ongoing research, we aim to educate the market on the importance of data privacy rights compliance, the need to enable consumers to easily exercise their data privacy rights, and how companies can build trust with their customers leveraging automated Data Subject Access Request submission and response solutions."

The research found 90% of companies were not fully compliant with CCPA and CPRA DSAR requirements and 95% of companies were using error prone and time consuming manual processes for GDPR compliance.

The trend of larger companies deploying automated solutions at a slightly higher rate than smaller companies continues, though the vast majority are unprepared for compliance.

More than 52% of B2B companies do not provide a mechanism for consumers to exercise their data privacy rights compared to 47% of B2C companies.

Data privacy rights are becoming more urgent as the expansive CPRA that goes into effect on January 1, 2023 requires companies to deploy an effective and scalable CCPA compliance management solution.

News URL

https://www.helpnetsecurity.com/2022/08/01/unprepared-ccpa-gdpr-compliance/