Majority of Organisations Want the GDPR Reformed

Pictured from left to right: Paul Lavery (Head of Technology and Innovation Group), Liam McKenna (Partner, Data Protection and Privacy, Mazars) and Amy Brick (Partner, Regulatory and Data Disputes).

The results come from this year’s edition of an annual survey on the impact of the GDPR on organisations in Ireland, jointly published today by leading law firm McCann FitzGerald LLP and Mazars, the international audit, tax, advisory and consulting firm. Five years after the introduction of the GDPR, the survey examines its impact and success since its 2018 introduction.

A majority of respondents agreed that complainants should be required to attempt to resolve complaints with the organisation processing their data before initiating a complaint with the Data Protection Commission (75%) and that data subjects should be required to pay a reasonable fee for making a data subject access request (52%).

Despite this appetite for reform, there is general belief that the GDPR has operated as a largely positive force. Strong agreement that the GDPR is beneficial for individuals is up twenty percentage points to 46% since 2018 (81% agree or strongly agree), while strong agreement that GDPR compliance is beneficial for organisations’ long-term relations with stakeholders such as employees and customers is up fourteen percentage points to 34% since 2018 (75% agree or strongly agree).

The general public, who formed part of this survey for the first time, demonstrated conflicting views about data protection. 80% said they are more concerned about their online privacy now as compared to 5 years ago and 78% agreed they are likely to purchase from organisations that have a good record in how they handle customers’ data.

However roughly half of all customers (49%) are willing to forgo some level of data protection if the product or service is very appealing, pointing to an appetite by a large portion of users of certain services, such as social media apps, to forgo some level of data protection to access these services.

Respondents from the general public also point to a potential need to simplify or more clearly communicate messages on data protection and the GDPR. 65% of members of the public agreed that organisations make it difficult to understand their approach to data protection, while one-in-four (24%) said they had either never heard of the GDPR or knew very little about it.