- 52% of British businesses admit to experiencing data-related issues since the inception of GDPR
- Over a fifth (23%) of UK businesses cite budget as a barrier to improving security practices
- Looking ahead, 40% say AI will create the most significant privacy and security challenges
LONDON–(BUSINESS WIRE)–As GDPR marks its seventh anniversary, new data from SurveyMonkey, the world’s most popular platform for surveys and forms, highlights how UK businesses continue to grapple with data protection challenges. In a survey of UK business decision makers, 95% of UK respondents say they understand and meet all requirements of GDPR, but over half (52%) admit to experiencing data-related issues since the regulation was introduced. Of these British businesses, one in six (16%) have faced the consequences of a GDPR-related fine or penalty, and 18% have experienced an official warning or investigation by a Data Protection Authority.
With data protection top of mind for UK businesses, SurveyMonkey today launches its new Trust Centre, a one-stop hub offering guidance, resources, and security assurances for businesses navigating today’s privacy landscape.
Set against a backdrop of industry data mishandling and cyber incidents, UK businesses face increasing challenges in improving their data privacy compliance and protecting sensitive data. It’s never been more important to understand how data is stored and used by suppliers. With the research finding 40% of UK businesses choose to now only partner with vendors who clearly outline their data protection measures, SurveyMonkey’s new Trust Centre offers businesses a transparent view of the company’s security and privacy practices, certifications, compliance measures, and third-party audit standards, enabling teams to make informed decisions about data handling and vendor risk.
Privacy at a price: The cost barrier holding UK businesses back
As cyber attacks and data breaches reach record highs, budget pressures remain a major stumbling block, with nearly a quarter (23%) of companies citing lack of funds as their greatest barrier to improving security, a challenge that looms even larger for smaller businesses (33%), organisations with 50 or fewer employees. This is despite 46% of businesses noting that they plan to invest more in security over the next year.
However, the importance of the investment may outweigh the budget concerns as the rapid rise of AI exposes the vulnerabilities of legacy systems, forcing businesses to reassess their strategies and prioritise robust, future-proof protections. A fifth (21%) of those surveyed noted that legacy technology was a key hurdle, with a third (33%) of UK businesses having recently invested in or planning to invest in new technology solutions such as encryption, data loss prevention, and privacy management software.
The AI privacy problem: 4 in 10 UK businesses sound the alarm
The rapid advancement of AI is making the safeguarding and management of sensitive information in the digital landscape more complex. When asked which emerging technologies will create the most significant privacy and security challenges over the next year, 40% noted AI and machine learning alongside concerns over generative AI (40%), followed by cloud computing platforms (28%), the internet of things (25%) and big data analytics (25%).
With AI adoption now at 89% among UK businesses, organisations are moving quickly to address the associated compliance obligations. Over two-thirds (70%) have already established, or are developing, dedicated policies and guidelines to manage AI-related privacy concerns. Additional measures include updating privacy policies (31%), partnering exclusively with vendors who provide transparent AI and data handling practices (31%), restricting the use of certain AI applications (27%), and delivering targeted AI and data privacy training to staff (27%). These steps will help companies comply with their traditional GDPR obligations and the enhanced obligations relating to AI under the new EU AI Act, which applies to any UK businesses selling AI products and services in the European Union.
From compliance to confidence: How privacy is winning over customers
Amid mounting compliance and security challenges, UK business leaders are doubling down on data protection and reaping the rewards. An overwhelming 92% say that adhering to GDPR and data privacy laws has given their company a competitive edge by strengthening customer trust, with 85% confident that their clients fully trust their data privacy practices. But this trust is hard-won, built on robust internal policies and unwavering compliance.
When it comes to compliance, an overwhelming 82% of UK businesses have updated their data protection policies in the past two years, with 36% doing so in the past six months alone. The same proportion (82%) has a dedicated Data Protection Officer in place or plans to appoint one.
Internal policies also help businesses to vet third-party vendors, with 91% of businesses feeling confident in their service providers’ handling of data. However, this trust is conditional as 89% insist on clear proof of compliance and security before partnering, and a publicly accessible hub detailing a vendor’s data protection and compliance measures is increasingly influencing partnership decisions. Notably, 78% have cut ties with vendors over concerns about GDPR or data security, a clear signal that trust must be earned and demonstrated. SurveyMonkey has long had a strong security and privacy program, but, in listening to our customers, we heard that they wanted more visibility into those programs. We built the Trust Centre to offer this transparency with an easy-to-access hub that helps procurement and IT teams evaluate us with confidence.
“Seven years after GDPR transformed how we think about data, many organisations still feel like they’re playing catch-up,” said Eric Johnson, CEO of SurveyMonkey. “As AI and big data introduce new layers of complexity, businesses need trusted tools and clear frameworks to meet rising expectations around compliance, security, and transparency. SurveyMonkey has long been a market leader in secure, compliant feedback collection—grounded in insights from real people, not algorithms. We built the Trust Centre to help organisations evaluate us as a partner, strengthen internal accountability, and build lasting customer trust. Good privacy practices shouldn’t be a guessing game, and with SurveyMonkey, they don’t have to be.”
SurveyMonkey also released a study of Irish business decision makers. The results can be shared upon request.
About the SurveyMonkey Trust Centre
SurveyMonkey’s Trust Centre is a central resource that helps businesses clearly understand how their data is protected. It brings together detailed information on security protocols, privacy practices, and compliance certifications, including GDPR readiness, ISO 27001, SOC 2, and HIPAA. The Trust Center is designed to support procurement and compliance teams by providing clear, accessible documentation for audits, due diligence, and vendor assessments. It reflects SurveyMonkey’s belief that transparency is not a nice-to-have, but a vital foundation for building trust with customers and partners.
About SurveyMonkey
SurveyMonkey is the world’s most popular platform for surveys and forms, built for business and loved by users. We combine powerful capabilities with intuitive design, effectively serving every use case, from customer experience to employee engagement, market research to payment and registration forms. With built-in research expertise and AI-powered technology, it’s like having a team of expert researchers right at your fingertips.
Trusted by millions–from startups to Fortune 500 companies–SurveyMonkey helps teams gather insights and information that inspire better decisions, create experiences people love, and drive business growth. Discover how at surveymonkey.com.
Methodology
This SurveyMonkey study was conducted April 16-24, 2025, among a sample of 571 full-time employed primary decision-makers in the UK. Primary decision-makers are self-identified, based on respondents who selected “I am the primary decision-maker” for the following question.
Which best describes your role in your organisation or team’s decision-making process for purchases?
- I am the primary decision-maker
- I have influence, but I am not the primary decision-maker
- I am not involved in the decision-making process
Respondents for this survey were selected from a non-probability online panel. The modeled error estimate for this survey is plus or minus 3.5 percentage points.
Contacts
Media Contact:
Clarity Global for SurveyMonkey
[email protected]
