London, 16 April 2018 – A new PAC/CXP Group study finds that only 19 percent of European organisations are ready for the full roll-out of the General Data Protection Regulation (GDPR). The report “Moving beyond the GDPR” is based on interviews of more than 200 senior business and IT executives at medium-sized and large companies operating across manufacturing, services, transport and the public sector in Europe.

The interviews were taken only three months before the deadline, yet 60 percent of respondents were confident they would still do enough to consider themselves ready.

According to the survey results, the UK is pitching itself as the most GDPR-ready European country, with 67 percent of UK respondents saying they will be ready by May. Surprisingly, the traditionally data-sensitive German, Austrian and Swiss region (DACH) is the least ready at 54 percent.

Fig. 1: Which of the following options best describes the current maturity of your GDPR programme?

Fig. 1: Which of the following options best describes the current maturity of your GDPR programme?

Data integration and management

Organisations are looking to use the onset of GDPR to make better use of data in the 57 percent that are looking to invest in data integration tools. A further 49 percent are looking at data quality through better data management and reporting tools.

Data Protection Officers thin on the ground

Study findings show that only 5 percent of European organisations are making the Data Protection Officer a new hire, with 26 percent either relying on existing personnel or extending the responsibilities of their existing data/privacy officers to support GDPR. Some 28 percent are simply handing the responsibility to the head of IT or CIO.


The PAC survey provides insights that GDPR will achieve its fundamental aim of protecting personal data from abuses by organisations. A significant 85 percent of respondents feel GDPR compliance would improve personal data classification and protection, and 63 percent think it would improve detection of breaches.

Paul Fisher, research director at PAC, said: “The results for our research conducted so close to the introduction of GDPR give the best indication yet of GDPR readiness across Europe and how organisations will adapt beyond the May 25 deadline. Despite Brexit, results show UK organisations to be taking the regulation very seriously, showing their commitment to data privacy and the changing data environment.

Our premium sponsor comments

While it may be viewed as just another regulatory burden, GDPR actually gives us a set of rules for doing business in the digital economy - and gaining customer trust,” said Chris Moyer, vice president and general manager of Security at DXC Technology. “Interestingly, 72 percent of the respondents to this survey see GDPR as an ‘enabler of new digital services’ and recognise the value in building customer loyalty and driving business growth.

About the study

“Moving beyond the GDPR – How will European organisations remain compliant and manage security and risk in the next five years?” is based on a survey conducted by Pierre Audoin Consultants (PAC) in Europe in January and February 2018, and has been published today. More than 200 senior business and IT executives at medium-sized and large companies with more than 250 employees in the United Kingdom and Ireland, France, the DACH region, Southern and Eastern Europe as well as the Nordic and Benelux regions were surveyed by telephone (CATI). The study was prepared in the multi-client model and supported by premium sponsors Citrix and DXC Technology and gold sponsors Ab Initio and Talend.

The executive summary and infographic relating to the study are now available for download at Please contact the premium and gold sponsors if you wish to receive a full version of the study.

About PAC – a CXP Group Company

Founded in 1976, Pierre Audoin Consultants (PAC) is part of CXP Group, the leading independent European research and consulting firm for the software, IT services and digital transformation industry. CXP Group offers its customers comprehensive support services for the evaluation, selection and optimization of their software solutions and for the evaluation and selection of IT services providers, and accompanies them in optimizing their sourcing and investment strategies. As such, CXP Group supports ICT decision-makers in their digital transformation journey. Further, CXP Group assists software and IT services providers in optimizing their strategies and go-to-market approaches with quantitative and qualitative analyses as well as consulting services. Public organizations and institutions equally base the development of their IT policies on our reports. Capitalizing on 40 years of experience, based in 8 countries (with 17 offices worldwide) and with 155 employees, CXP Group provides its expertise every year to more than 1,500 ICT decision-makers and the operational divisions of large enterprises as well as mid-market companies and their providers. CXP Group consists of three branches: Le CXP, BARC (Business Application Research Center) and Pierre Audoin Consultants (PAC). For more information please visit or follow us on Twitter, LinkedIn or our Blog.

About DXC Technology

DXC Technology (DXC: NYSE) is the world's leading independent, end-to-end IT services company, serving nearly 6,000 private and public-sector clients from a diverse array of industries across 70 countries. The company's technology independence, global talent and extensive partner network deliver transformative digital offerings and solutions that help clients harness the power of innovation to thrive on change. DXC Technology is recognized among the best corporate citizens globally. For more information, visit Learn more about GDPR at

Contact details

Please feel free to contact us for any further information:


Paul Fisher BSc
Research Director
Phone: +44 7951 584 489

Press and marketing contact

Sarah Wilson
Marketing Manager
Phone: +44 7377 702 887