Bitkom study reveals: even 2 years after the introduction of the GDPR, companies still find it difficult to implement the GDPR

von Désirée Eder

The Federal Association for Information Technology, Telecommunications and New Media e. V. (Bitkom) has commissioned a study on the implementation of the GDPR in companies, the results of which were presented on September 29, 2020. According to this, half of the companies surveyed did not introduce new projects due to the requirements of the GDPR. Only 20% of the companies stated that they have now fully implemented the GDPR.

GDPR as an obstacle to innovative projects

The conclusion of the study could be that companies in Germany still have great difficulties with the GDPR. 92% of the companies surveyed also found that the GDPR had to be improved.

Of the companies that had stopped projects due to the GDPR, more than half cited unclear provisions of the GDPR as the reason. Around 75% of the companies surveyed said they were unsure about the requirements of the GDPR. Almost a third of the companies that stopped innovations cited certain requirements of the GDPR as the reason.

More than 500 companies in Germany with more than 20 employees each were surveyed. Bitkom conducted a similar survey in 2019.

Only every fifth company has fully implemented the GDPR

More than 2 years after the introduction of the GDPR, only one in five companies said that they had fully implemented the GDPR. Almost 90% of companies are of the opinion that the GDPR cannot be fully implemented. More than a third of the companies complain that the GDPR significantly increases the workload. Only one fifth of companies see the GDPR as an advantage and around 60% of companies consider data protection to be a competitive advantage. On the other hand, 70% complain that their business processes are becoming more complicated.

Bitkom also regrets that the GDPR is currently often perceived by companies as a brake – not only when using new data analyzes or artificial intelligence, but also when digitizing business processes.

GDPR also a problem when working from home

Especially during the corona pandemic, the GDPR was increasingly perceived as the cause of the problem. Companies did not use tools for collaboration, and only limited use of video calls, messenger services or clouds. In addition, 40% of companies are now of the opinion that the requirements of the GDPR are technically difficult to implement. In particular, almost 70% consider the deletion obligations under GDPR to be difficult to implement in practice

High need for advice in practice

Four fifths of the companies would also like better advice and practical interpretation aids from the supervisory authorities. 60% believe that the GDPR would be easier to implement for them if the interpretation of the GDPR were uniform at the European and German levels.

For around 25% of the companies surveyed, a lack of specialist staff is a major challenge when implementing the GDPR.

If you also need support from highly qualified experts – contact us here. We have everything to do with data protection at a glance for you and take care of your data protection processes so that you can concentrate on your core business again.

assets/images/0/k-Desiree-Eder-8be89466.jpg
Désirée Eder

Die Diplomjuristin Désirée Eder studierte Rechtswissenschaften an der Universität Passau und war mehrere Jahre in Berlin in einem landeseigenen Unternehmen für Immobilienprojekte als Projektmanagerin Recht und Datenschutzbeauftragte tätig. Désirée Eder bereichert das Team nicht nur mit ihrem juristischen Know-How sondern ist auch im Bereich der Organisation und Dokumentation, sowie im Rahmen der immer wichtiger werdenden DIN-ISO Normen und für Zertifizierungsprozesse erste Ansprechpartnerin. „Für das Wohl unserer Kunden sind mir offene Kommunikation sowie eine strukturierte, effiziente und gründliche Arbeitsweise wichtig.“

Schlagworte: GDPR, Data protection