With less that one year to go until tough new EU data laws come into force the level of preparedness appears woeful.
When the European General Data Protection Regulation (GDPR) comes into effect on May 25th 2018 all organisations that retain or process personal information will need to comply or face crippling fines.
But according to law firm Blake Morgan many organisations across the public and private sectors are far from having their houses in order and could be fined up to £17m or 4% of worldwide turnover.
Bruce Potter, Chairman of Blake Morgan, said: "We are just a year away from a major shake-up of information governance laws at a European level and it's fair to say that many businesses and public sector organisations are under prepared.
"The huge growth of the digital economy requires a more robust legal framework to ensure public confidence in the protection of information, and organisations need to adapt to these higher standards now."
Just half of respondents in a NetApp survey published last month had 'some' understanding of GDPR. "We have a long way to go and only a year to do it," stated Dr. Dierk Schindler, Head of EMEA Legal & Global Legal Shared Services at NetApp.
"As the cloud continues to transform the way we do business GDPR lays the foundations for our data-driven future and provides a strong incentive for all enterprises that process EU citizens' data to build a robust data privacy compliance framework.
"C-suite staff and IT managers, however, are still uncertain when it comes to data compliance, which is both striking and concerning as it lies at the heart of GDPR.
"Their understanding of compliance and ability to embrace the responsibility for any data they handle will directly affect their capacity to fend off future fines."
According to Gartner, non-compliant organisations will outnumber those that comply by the end of 2018. "The GDPR will affect not only EU-based organisations but many data controllers and processors outside the EU," said Bart Willemsen, Research Director at Gartner.
The GDPR replaces the Data Protection Directive 95/46/EC and is designed to support the single market and harmonise data privacy laws across Europe.
Sheila Fitzpatrick, Worldwide Data Governance & Privacy Counsel/Chief Privacy Officer, NetApp, added: "Brexit and the outcome of elections will have little to no impact on whether UK businesses need to comply with GDPR. It applies to any businesses that comes into contact with data on an EU citizen.
"As such, companies of all sizes need to take an active look at what data they hold, what they use it for and where it's stored."