How confident are you in your data privacy program?

Thank you for participating in this survey sponsored by RSA

Nearly six months after the enactment of Europe's new stringent data privacy regulation, the United States is grappling with potential legislation of its own to protect consumers’ information. What does a best-practices data privacy strategy look like at your company, and at what cost? Are you doing enough to stay compliant? Are you prepared for a potential new set of rules regarding data protection?

Question Title

* 1. Does helping ensure data privacy fall within your scope of responsibility within your organization?

Yes

Question Title

* 2. What size is your company?

1-50 employees

51-250 employees

251-1,000 employees

1,000-5,000 employees

More than 5,000 employees

Question Title

* 3. Is your data privacy program in compliance with state, national, and international (if applicable) regulations?

Yes, we’ve got it locked down

Mostly, but struggling to keep up

I’m not sure

Question Title

* 4. How has the amount of data you collect from customers today changed compared to what you collected three years ago?

We collect much more data today

We collect a little more data today

It’s about the same

We collect less data today

Question Title

* 5. What percentage of your compliance budget is dedicated to data security or compliance with data privacy regulations?

Less than 10 percent

Between 10-25 percent

Between 25-50 percent

More than 50 percent

Question Title

* 6. Do you feel like you have the necessary level of commitment (both financially and philosophically) from the board and C-suite on data privacy?

Yes

Question Title

* 7. What’s the best argument for a robust data protection program?

Meeting demands of customers

Complying with regulations (and avoiding big fines)

Supporting the company’s values

Question Title

* 8. How would you describe your current data privacy policy/program?

Robust

Somewhat vulnerable, but improving

Weak

Question Title

* 9. Is your company fully GDPR compliant?

Yes

N/A

Question Title

* 10. Which of these provisions of GDPR have been/would be most difficult to implement?

The right for consumers to ask that their personal data be deleted

The right for consumers to know how their data is being used

The separation of PII (personal identifiable information) from other account information

Requirement to report a data breach within 72 hours of discovering it

Question Title

* 11. Are you in favor of national legislation governing data privacy in the United States?

Yes

No, I’d prefer a more localized approach

I don’t think new data privacy legislation is necessary

Question Title

* 12. What’s your biggest worry if the United States adopts a GDPR-like national regulation on data privacy?

Unintended consequences, like stifling innovation

What compliance failure would mean for my company

Having the budget and lead time to meet the requirements

Question Title

* 13. What would worry you more in the event of a data breach?

Fines incurred

Reputational damage

Question Title

* 14. What do you consider your biggest risk when it comes to data protection?

Hackers

Sloppy third parties

Internal bad actors

Outdated policies and protections

Question Title

* 15. Has your company suffered a data breach within the past 5 years?

Yes

Not that I know of

Question Title

* 16. Enter you email address to qualify to win the $100 Amazon gift card (we will not use this information for any other purpose).

Email Address