As the General Data Protection Regulation (GDPR) marks its seventh anniversary, new insights from SurveyMonkey, the world’s leading survey platform, reveal ongoing challenges faced by Irish businesses in data protection and compliance. Despite a strong claimed understanding of GDPR requirements, many organisations continue to experience data-related issues, fines, and regulatory investigations.

In response, SurveyMonkey has launched its new Trust Centre a comprehensive hub designed to help businesses navigate the complex privacy landscape with clarity, transparency, and confidence.

Irish Businesses' GDPR Reality: Awareness, Issues, and Enforcement

A recent SurveyMonkey poll of Irish business decision-makers highlights that while 94% say they understand and meet GDPR requirements, more than half (58%) have faced data-related issues since GDPR’s implementation. Notably:

• 20% have been fined or penalized due to GDPR breaches.

• 19% have received warnings or undergone investigations by Data Protection Authorities.

This indicates that despite widespread awareness, real-world compliance remains a challenge.

Data Privacy as a Strategic Priority

Data protection is increasingly vital in the wake of rising cyber incidents and industry data mishandling. Survey results reveal:

• 37% of Irish businesses now only partner with vendors who transparently disclose their data protection measures.

• Businesses emphasize understanding how data is stored and used by suppliers.

SurveyMonkey’s Trust Centre aims to provide this transparency by showcasing its security certifications, compliance protocols, and third-party audit results—empowering procurement and IT teams to make informed decisions and mitigate vendor risk.

Budget Constraints and Legacy Technology: Barriers to Security Investment

While cybersecurity risks intensify, budget limitations hold back many companies:

• 26% cite lack of funds as the top barrier to improving security.

• 47% plan to increase security investments in the coming year.

Legacy systems pose another hurdle, with 25% identifying outdated technology as a challenge. Nonetheless, nearly a third (29%) have recently invested or plan to invest in advanced security solutions, including encryption, data loss prevention, and privacy management tools.

The Growing AI Privacy Challenge

As AI adoption hits 95% among Irish businesses, the complexity of safeguarding sensitive data grows:

• 41% cite AI and machine learning as significant privacy and security challenges ahead.

• Concerns about generative AI stand at 43%, with cloud computing (29%), big data analytics (29%), and blockchain (23%) also flagged.

To address these, over 70% are developing or have established AI-related privacy policies. Additional steps include:

• AI and data privacy training (36%)

• Restricting certain AI applications (36%)

• Partnering only with vendors transparent about AI data handling (32%)

These initiatives align with traditional GDPR obligations and evolving requirements under the EU AI Act.

Privacy Compliance as a Competitive Advantage

Despite challenges, Irish businesses recognize the strategic value of strong data protection:

• 90% say GDPR compliance strengthens customer trust and gives a competitive edge.

• 85% updated their data protection policies in the past two years; 70% within the last year.

• 89% have a Data Protection Officer or plan to appoint one.

Vendor trust is conditional and carefully managed, with 90% requiring proof of compliance before partnering, and 76% cutting ties with vendors due to data security concerns.

SurveyMonkey’s Trust Centre: Transparency and Confidence in Privacy

Recognizing customer demand for visibility into data security, SurveyMonkey’s newly launched Trust Centre serves as a transparent, easy-access portal detailing the company’s privacy practices, compliance certifications, and audit results.

Eric Johnson, CEO of SurveyMonkey, notes:

“Seven years after GDPR transformed how we think about data, many organisations still feel like they're playing catch-up. As AI and big data introduce new layers of complexity, businesses need trusted tools and clear frameworks to meet rising expectations around compliance, security, and transparency. SurveyMonkey has long been a market leader in secure, compliant feedback collection—grounded in insights from real people, not algorithms. We built the Trust Centre to help organisations evaluate us as a partner, strengthen internal accountability, and build lasting customer trust. Good privacy practices shouldn’t be a guessing game, and with SurveyMonkey, they don’t have to be.”

Navigating Data Privacy in a Complex World

Irish businesses face a balancing act—meeting regulatory demands, managing AI risks, and overcoming budget and legacy system challenges. Yet, those who invest in robust privacy practices stand to gain significant trust and competitive advantage.

SurveyMonkey’s Trust Centre is positioned to be a key resource, enabling businesses to confidently partner with compliant vendors and bolster internal data protection strategies in an evolving regulatory environment.