What is your analysis of the Cercle's survey results?

I wasn't very surprised by the results. The main messages are reassuring although there's still information and awareness work to be done. For example, a third of the respondents don't know what is a Data Protection Officer.

What are the most notable elements?

One result that might appear surprising, but really isn't, is question 6. We learn that two-thirds of organisations don't have a procedure for reporting personal data violations. This is significant because it shows that companies are uncomfortable with this topic that still frightens them. Question 7 might seem encouraging (two-thirds of respondents know that subcontractors' obligations are increased by the European regulation), but we should note that few of them consider the consequences. Starting with revising contract practices.

A more positive element?

The answer to question 8, where we see that awareness campaigns are bearing fruit and companies have understood the importance of impact analyses.