GDPR: Insights from One Year On GDPR survey final | Page 2

The GDPR and Executive Search Insights from One Year On “The dedicated functionality in Invenias has ensured that recording the purpose and lawful basis for processing data has had minimal disruption to workflow. Ongoing support from ComplyGDPR has allowed us to understand where to focus our efforts in order to keep on top of our GDPR project.” Cameron Berry, Data Insight and Training Analyst, Sheffield Haworth The introduction of the GDPR presented a number of challenges, not least the fact that the legislation wasn’t drafted to consider the nuances of an industry so reliant on high quality personal data. A year on, there is still ambiguity and no clear cut rule that organizations should abide by in order to guarantee compliance. Businesses have had to make decisions in areas where there are no definitive guidelines. However, across the Invenias customer base and the wider market, a common consensus has emerged regarding the approach taken by leading search firms and in-house talent teams as they seek to comply with the legislation. Trends are being identified in respect to volumes of data subject access requests and data breaches. A year after the original April 2018 survey, we have repeated the survey in conjunction with ComplyGDPR to find out how executive search professionals have been affected by the first year of the GDPR. The survey findings presented in this report are part of our ongoing commitment to providing best practice guidance and support for our customers and the wider market. Our findings should not be taken as a substitute for legal advice, but I hope they will provide reassurance that others share the same concerns and challenges relating to the GDPR, as well as assist in learning useful lessons in where data breaches are occurring and how they can be avoided. Richard Harrison SVP Product, Executive Search Invenias by Bullhorn