Manufacturers struggling to cope with spike in GDPR data requests

2 mins read

The research, conducted following the first anniversary of the GDPR, showed that three quarters of manufacturers (75%) saw an increase in data access requests from customers and their own employees in the 12 months following the GDPR’s introduction in May 2018.

One in ten (10%) manufacturers experienced an increase of more than 50% in the volume of requests. Nine in ten (92%) firms that have seen an increase in requests reported that they’d found effectively responding to them challenging, citing complexity (58%) and cost (58%) as the biggest obstacles. A third (33%) of businesses that had experienced an increase in data access requests cited a reliance on paper documentation as a barrier.

Under the GDPR, individuals can submit a data access request free of charge to receive a copy of personal data that organisations hold on them, along with information on factors such as why their personal data is being used. In general, the GDPR requires that organisations must respond to data access requests within one month.

Craig Naylor-Smith, managing director, Parseq, said: “The GDPR made it easier for people to access their personal data from organisations. With this power at their fingertips, we expected to see that data access requests would rise.

“However, the fact that so many manufacturers have struggled to respond to the surge in requests suggests that the pressure this has put on businesses has been greater than they anticipated, or that many were simply unprepared for what GDPR would bring.

“What’s particularly interesting to see is that so many businesses state a reliance on paper documentation as a barrier. The digitisation of paper documents can make personal information easier to process and manage, make data access requests easier to respond to and, ultimately, help manufacturers use data to deliver innovative products and services in an increasingly competitive, digital landscape.”

Parseq’s research also examined the efforts that manufacturers made to digitise paper documentation containing employee and customer data in the 12 months before and after May 2018.

Improving data privacy and complying with the GDPR was the biggest driver of digitisation in the year before (67%) and after (56%) May 2018. However, only 8% of respondents digitised all the paper documentation they held in the year prior to the GDPR’s introduction. This rose to 12% in the 12 months following.

Manufacturers that didn’t digitise all of their paper documentation containing customer and employee information in the year before the GDPR came into force cited the maintenance of archiving facilities to store paper documents (47%) and cost (45%) the biggest barriers.

Following the GDPR’s implementation, cost (47%) and the maintenance of archiving facilities to store paper documents (42%) were also the biggest barriers, followed closely by a lack of staff resource (39%).

Craig Naylor-Smith added: “It’s encouraging to see that manufacturers are turning to digitisation to meet the demands of data privacy and complying with the GDPR, but it’s clear that only a small proportion have been able to digitise all of the paper documentation they hold containing customer and employee data.

“Cost and investment in existing archiving facilities are evidently widely perceived barriers to digitisation, however, in our experience, this is not the reality. The initial outlay involved in digitisation is usually outweighed by cost efficiencies generated in the long term. Money that is, for example, tied up in maintaining a space where paper documentation is stored, can be invested elsewhere once the information it holds is digitised.”