52% of British businesses admit to experiencing data-related issues since the inception of GDPR
Over a fifth (23%) of UK businesses cite budget as a barrier to improving security practices
Looking ahead, 40% say AI will create the most significant privacy and security challenges

As GDPR marks its seventh anniversary, new data from SurveyMonkey, the world’s most popular platform for surveys and forms, highlights how UK businesses continue to grapple with data protection challenges. In a survey of UK business decision makers, 95% of UK respondents say they understand and meet all requirements of GDPR, but over half (52%) admit to experiencing data-related issues since the regulation was introduced. Of these British businesses, one in six (16%) have faced the consequences of a GDPR-related fine or penalty, and 18% have experienced an official warning or investigation by a Data Protection Authority.

With data protection top of mind for UK businesses, SurveyMonkey today launches its new Trust Centre, a one-stop hub offering guidance, resources, and security assurances for businesses navigating today’s privacy landscape.

Set against a backdrop of industry data mishandling and cyber incidents, UK businesses face increasing challenges in improving their data privacy compliance and protecting sensitive data. It’s never been more important to understand how data is stored and used by suppliers. With the research finding 40% of UK businesses choose to now only partner with vendors who clearly outline their data protection measures, SurveyMonkey’s new Trust Centre offers businesses a transparent view of the company’s security and privacy practices, certifications, compliance measures, and third-party audit standards, enabling teams to make informed decisions about data handling and vendor risk.

Privacy at a price: The cost barrier holding UK businesses back

As cyber attacks and data breaches reach record highs, budget pressures remain a major stumbling block, with nearly a quarter (23%) of companies citing lack of funds as their greatest barrier to improving security, a challenge that looms even larger for smaller businesses (33%), organisations with 50 or fewer employees. This is despite 46% of businesses noting that they plan to invest more in security over the next year.

However, the importance of the investment may outweigh the budget concerns as the rapid rise of AI exposes the vulnerabilities of legacy systems, forcing businesses to reassess their strategies and prioritise robust, future-proof protections. A fifth (21%) of those surveyed noted that legacy technology was a key hurdle, with a third (33%) of UK businesses having recently invested in or planning to invest in new technology solutions such as encryption, data loss prevention, and privacy management software.

The AI privacy problem: 4 in 10 UK businesses sound the alarm

The rapid advancement of AI is making the safeguarding and management of sensitive information in the digital landscape more complex. When asked which emerging technologies will create the most significant privacy and security challenges over the next year, 40% noted AI and machine learning alongside concerns over generative AI (40%), followed by cloud computing platforms (28%), the internet of things (25%) and big data analytics (25%).

With AI adoption now at 89% among UK businesses, organisations are moving quickly to address the associated compliance obligations. Over two-thirds (70%) have already established, or are developing, dedicated policies and guidelines to manage AI-related privacy concerns. Additional measures include updating privacy policies (31%), partnering exclusively with vendors who provide transparent AI and data handling practices (31%), restricting the use of certain AI applications (27%), and delivering targeted AI and data privacy training to staff (27%). These steps will help companies comply with their traditional GDPR obligations and the enhanced obligations relating to AI under the new EU AI Act, which applies to any UK businesses selling AI products and services in the European Union.

From compliance to confidence: How privacy is winning over customers

Amid mounting compliance and security challenges, UK business leaders are doubling down on data protection and reaping the rewards. An overwhelming 92% say that adhering to GDPR and data privacy laws has given their company a competitive edge by strengthening customer trust, with 85% confident that their clients fully trust their data privacy practices. But this trust is hard-won, built on robust internal policies and unwavering compliance.

When it comes to compliance, an overwhelming 82% of UK businesses have updated their data protection policies in the past two years, with 36% doing so in the past six months alone. The same proportion (82%) has a dedicated Data Protection Officer in place or plans to appoint one.

Internal policies also help businesses to vet third-party vendors, with 91% of businesses feeling confident in their service providers’ handling of data. However, this trust is conditional as 89% insist on clear proof of compliance and security before partnering, and a publicly accessible hub detailing a vendor’s data protection and compliance measures is increasingly influencing partnership decisions. Notably, 78% have cut ties with vendors over concerns about GDPR or data security, a clear signal that trust must be earned and demonstrated. SurveyMonkey has long had a strong security and privacy program, but, in listening to our customers, we heard that they wanted more visibility into those programs. We built the Trust Centre to offer this transparency with an easy-to-access hub that helps procurement and IT teams evaluate us with confidence.

“Seven years after GDPR transformed how we think about data, many organisations still feel like they’re playing catch-up,” said Eric Johnson, CEO of SurveyMonkey. “As AI and big data introduce new layers of complexity, businesses need trusted tools and clear frameworks to meet rising expectations around compliance, security, and transparency. SurveyMonkey has long been a market leader in secure, compliant feedback collection—grounded in insights from real people, not algorithms. We built the Trust Centre to help organisations evaluate us as a partner, strengthen internal accountability, and build lasting customer trust. Good privacy practices shouldn’t be a guessing game, and with SurveyMonkey, they don’t have to be.”

SurveyMonkey also released a study of Irish business decision makers. The results can be shared upon request.

About the SurveyMonkey Trust Centre

SurveyMonkey’s Trust Centre is a central resource that helps businesses clearly understand how their data is protected. It brings together detailed information on security protocols, privacy practices, and compliance certifications, including GDPR readiness, ISO 27001, SOC 2, and HIPAA. The Trust Center is designed to support procurement and compliance teams by providing clear, accessible documentation for audits, due diligence, and vendor assessments. It reflects SurveyMonkey’s belief that transparency is not a nice-to-have, but a vital foundation for building trust with customers and partners.

About SurveyMonkey

SurveyMonkey is the world’s most popular platform for surveys and forms, built for business and loved by users. We combine powerful capabilities with intuitive design, effectively serving every use case, from customer experience to employee engagement, market research to payment and registration forms. With built-in research expertise and AI-powered technology, it’s like having a team of expert researchers right at your fingertips.

Trusted by millions–from startups to Fortune 500 companies–SurveyMonkey helps teams gather insights and information that inspire better decisions, create experiences people love, and drive business growth. Discover how at surveymonkey.com.

Methodology

This SurveyMonkey study was conducted April 16-24, 2025, among a sample of 571 full-time employed primary decision-makers in the UK. Primary decision-makers are self-identified, based on respondents who selected “I am the primary decision-maker” for the following question.

Which best describes your role in your organisation or team’s decision-making process for purchases?

I am the primary decision-maker
I have influence, but I am not the primary decision-maker
I am not involved in the decision-making process

Respondents for this survey were selected from a non-probability online panel. The modeled error estimate for this survey is plus or minus 3.5 percentage points.

View source version on businesswire.com: https://www.businesswire.com/news/home/20250521583392/en/

Media Contact:
Clarity Global for SurveyMonkey
surveymonkeyuk@clarity.global

Logo

Tags

More Like This

SurveyMonkey Launches Trust Centre to Bolster Business Confidence, Fresh Ireland Data Reveals Compliance Challenges Persist Under GDPR

Usercentrics Report Reveals: As Concern Over Data Use Grows, Transparency Becomes the Number One Driver for Building Trust

SurveyMonkey Reveals New Business, Cultural, and Social Trends in Second Annual State of Surveys Report

Data Security Top of Mind for UK HR Tech Buyers, Capterra Survey Reveals

Cisco's 2025 Data Privacy Benchmark Study: Privacy landscape grows increasingly complex in the age of AI

New research reveals only a handful of organisations can access sensitive data in a timely manner

New Cisco Survey Shows Strong Relationship Between Privacy Awareness and Trust in AI

New Smarsh UK Survey Shows AI Adoption Surges in Financial Services—But Employees Demand Stronger Guardrails