Data Protection Business Readiness Research

The purpose of this work is to help DCMS understand data protection risk for businesses if the UK becomes a third country with respect to the GPDR. In the final report, we want guidance on the level of risk businesses face, how prepared they are to tackle risks, and what the likely residual risk would be based on existing plans. We would also like a sectoral analysis covering 18 sectors (see below) and an analysis of respective risks faced by SMEs and large businesses.