This document summarizes the findings of a survey conducted in France, Germany and the UK about attitudes towards cloud services, data needs, and awareness and preparedness for the upcoming GDPR legislation. The key findings were: 1) Awareness of GDPR varies across countries, with over half having some understanding but 10% not knowing what GDPR is; 2) Over 70% of respondents are at least slightly concerned about meeting the GDPR deadline; and 3) Preparedness for GDPR is slow, with half making some preparations but only a third considering themselves fully compliant.

1. NetApp
Cloud GDPR
Response Survey
EMEA Findings II
© 2017 NetApp, Inc. All rights reserved.1
NetApp and Opinion Matters
April 2017

2. © 2017 NetApp, Inc. All rights reserved.2
NetApp EMEA extends its cloud survey to the next level, to gauge
response towards General Data Protection Regulation (GDPR). The
survey was conducted across a database of 750 CIOs, IT Managers and
C-suite executives in France, Germany and the UK, to understand
attitudes towards cloud services, data needs and the level of awareness
and preparedness for incoming GDPR legislation.
This presentation summarizes the understanding
of GDPR and compliance among EMEA
businesses and their level of preparedness.
Introduction

3. © 2017 NetApp, Inc. All rights reserved.3
Understanding the level
of awareness and
concerns towards GDPR

4. © 2017 NetApp, Inc. All rights reserved.4
What’s your level of awareness towards GDPR?
Awareness level within EMEA
12%
26%
52%
10%
15%
32%
41%
9%
17%
26%
48%
8%
15%
29%
47%
9%
I fully understand
GDPR
I have a good
understanding of
GDPR
I have some
understanding of
GDPR
I do not know what
GDPR is
EMEA DE FR UK
 Majority of respondents have some
understanding of GDPR.
 Germany has the highest number
of respondents with full
understanding of GDPR, followed
by France. UK has the lowest
awareness level.
 With only a year until the GDPR
deadline, almost 10% of the base
respondents don’t know what
GDPR is.

5. © 2017 NetApp, Inc. All rights reserved.
5
 Mirroring the low level of
awareness of GDPR among CIOs
and IT Managers in EMEA :
73% of base respondents say
they have at least some level of
concern about meeting the
GDPR deadline.
Concern level within EMEA
What is your level of concern about meeting the GDPR deadline?
27%
48%
21%
4%
31%
43%
20%
5%
27%
51%
19%
3%
24%
48%
24%
4%
I have no concerns about
us meeting the GDPR
deadline and delivering
what is needed
I am slightly concerned
about us meeting the
GDPR deadline and
delivering what is needed
I am concerned about us
meeting the GDPR
deadline and delivering
what is needed
I am extremely concerned
about us meeting the
GDPR deadline and
delivering what is needed
EMEA DE FR UK

6. © 2017 NetApp, Inc. All rights reserved.6
Who is responsible for your
business' data compliance?

7. © 2017 NetApp, Inc. All rights reserved.7
Responses towards compliance responsibility
within EMEA
Who is responsible for your business’ data compliance?
51%
46%
37%
2%
43%
47%
40%
3%
53%
43%
36%
1%
58%
49%
35%
3%
With the company that
produces the data
With any company that
processes the data
With third-party cloud
providers
I don't know
EMEA DE FR UK
Companies are struggling with the
responsibilities for compliance:
 Half of EMEA respondents believe that
responsibility lies with the company
producing the data.
 Less than half say responsibility for
compliancy lays with the company that
processes the data.
 Over a third of EMEA respondents say
responsibility for their data lays with
third-party cloud providers.

8. © 2017 NetApp, Inc. All rights reserved.8
What is your level of
preparedness for GDPR
regulation?

9. © 2017 NetApp, Inc. All rights reserved.9
Level of preparedness within EMEA
Which of these statements best describe your level of preparedness
for GDPR?
49%
35%
14%
2%
44%
42%
11%
3%
53%
33%
12%
1%
50%
30%
18%
2%
We have made some
GDPR preparations but
are not yet fully compliant
with the regulation
We have made all the
necessary GDPR
preparations and are fully
compliant with the
regulation
We have not yet made any
preparations
I don't know what
preparations we need to
make to be compliant with
the regulation
EMEA DE FR UK
 Preparations for GDPR are slow
moving, with more than a tenth of
respondents yet to make any
preparations at all.
 Almost half of EMEA respondents
have made some preparations ahead
of the GDPR deadline.
 Germany stands as the most prepared
nation, followed by France and then
UK.

10.  Only a third of respondents across
EMEA say they are investing extra
funds in preparation for the GDPR
deadline.
 Germany is the most prepared
region with over a quarter saying
they have already hired specific
personnel with data protection
expertise.
Impact of GDPR on business’ Cloud strategy within EMEA
© 2017 NetApp, Inc. All rights reserved.10
How does the GDPR and European data privacy legislation in
general influence your cloud strategy?
50%
37%
25%
18%
21%
6%
46%
33%
26%
15%
27%
6%
55%
40%
20%
14%
20%
6%
50%
38%
28%
24%
17%
5%
We will continue to
invest into public
cloud services and
ensure compliance
with data regulation
requirements like
GDPR
We are investing
more resources into
data regulation
compliance
We are considering
scaling back our
public cloud services
investment
We have already
started lowering our
public cloud services
investment
We have hired
specific personnel
with expertise in data
protection
We do not think
GDPR has been or
will be a major
influence on our
cloud strategy
EMEA DE FR UK

11. © 2017 NetApp, Inc. All rights reserved.11
What are your primary
motivations for cloud
adoption?

12. © 2017 NetApp, Inc. All rights reserved.12
Primary motivation for cloud adoption within EMEA
What are your primary motivations for cloud adoption?
 Only a good quarter regard
compliance with regulation
as a key motivation for cloud
adoption.
 Over half regard security as
a motivation.
 This highlights the fact that
businesses are still not
focused on the issue of
compliance – a crucial
element of GDPR.
Data in percentages
56 55 54
52
48 47
45
30 29 29
59 59
53
46
51
48
53
38
33
29
57 56 57
61
53
47
41
28
32
30
53
49
52
50
40
47
39
24
21
28
Security Flexibility Cost
savings
Ease of use Reliability Scalability Data
protection
Data privacy Access to
data
Compliance
with data
regulation
EMEA DE FR UK

13. Thank you.