The survey found that global businesses have high awareness of GDPR but still have work to do to be fully compliant. One in three businesses believe non-compliance could threaten their existence, and half think it could cause reputational damage. While two in three have concerns about meeting the deadline, only two in five are confident in knowing where all their data is stored. Motivation to prepare is high given the risks, but some businesses may still struggle to finish all required tasks before the deadline.

1. NetApp GDPR Survey
Gauging global awareness of business concerns
© 2018 NetApp, Inc. All rights reserved. — NETAPP CONFIDENTIAL —
April 2018
1

2. NetApp GDPR survey
 The 25th May 2018 General Data Protection Regulation (GDPR) affects
all businesses that process the data of an EU citizen.
 NetApp embarked upon a global survey to gauge the level of GDPR
preparedness among businesses and to understand their key concerns.
 The survey was completed by Opinion Matters in March 2018, including
1,106 C-suite, CIOs and IT managers responsible for IT buying
decisions as well as IT managers involved in IT buying decisions, working
in companies employing 100+ employees in the US, UK, France and
Germany.
 The 2018 survey extends research NetApp commissioned in 2017 to
understand attitudes towards cloud services, data needs and the level of
awareness and preparedness for incoming GDPR legislation.
Gauging global awareness of business concerns
© 2018 NetApp, Inc. All rights reserved. — NETAPP CONFIDENTIAL —

3. Key findings
 Awareness is high as one in three global businesses believe the impact of GDPR could
threaten their existence. Half think it will cause reputational damage.
 Strong motivation for GDPR preparation is garnered by two in three businesses having
concerns over meeting the GDPR deadline.
 There is still time for improvement, as indicated by only two in five businesses being
confident in knowing where data is stored – which is adding to concern.
Gauging global awareness of business concerns
3 © 2018 NetApp, Inc. All rights reserved. — NETAPP CONFIDENTIAL —

4. 35%
35% of global
businesses think
GDPR threatens
their existence
With the GDPR deadline approaching,
global businesses are well aware of
the impact of non-compliance.
© 2018 NetApp, Inc. All rights reserved. — NETAPP CONFIDENTIAL —

5. 51%
51% of global
businesses think
GDPR results in
reputational damage
With the GDPR deadline approaching,
global businesses are well aware of
the impact of non-compliance.
© 2018 NetApp, Inc. All rights reserved. — NETAPP CONFIDENTIAL —

6. What impact could non-compliance with GDPR have on
your business?
51.5%
50.2%
43.8%
39.7% 40.4%
34.3%
56%
46.7%
48.6%
31.3%
40.5%
34.7%
49.3%
41.3%
35.4%
37.5%
34%
33%
45.4%
37.8%
36.6%
32.4%
26%
38.2%
50.2%
41.9
40.1%
33.9% 33.5%
35.2%
50.5%
44.1%
41%
35.4% 35.4% 35%
0
10
20
30
40
50
60
Reputational damage Revenue loss Mistrust from existing
customers
Mistrust from existing partners Company survival at stake due
to financial penalties
Job loss
Percentofrespondents
The impact of GDPR non-compliance on business
USA UK France Germany EMEA Global
6 © 2018 NetApp, Inc. All rights reserved. — NETAPP CONFIDENTIAL —

7. What impact could non-compliance with GDPR have on
your business?
31.3%
27.9%
23.6%
13.8%
3%
0%
27.4% 27.4%
21.6%
8.9%
5%
0%
26%
21.9%
16.7%
9.4%
3.1%
1%
32.4%
16.8%
14.1%
6.1%
4.2%
0%
28.5%
22
17.4%
8.2%
4.1%
0.4%
29.3%
23.6%
19.1%
9.7%
3.8%
0.3%
0
5
10
15
20
25
30
35
Mistrust from existing suppliers Mistrust from employees Make conversations with
regulators and policy makers
more difficult
Recruitment difficulties GDPR non-compliance would
have no impact on our
business
Other
Percentofrespondents
The impact of GDPR non-compliance on business
USA UK France Germany EMEA Global
7 © 2018 NetApp, Inc. All rights reserved. — NETAPP CONFIDENTIAL —

8. 67%
67% of global
businesses think
they may not meet
the GDPR deadline
Motivation for further preparations
ahead of the deadline is now high,
with businesses working to alleviate
concerns
© 2018 NetApp, Inc. All rights reserved. — NETAPP CONFIDENTIAL —

9. 9%
In EMEA, levels of
concerns have
decreased by 9%
over 15 months
Motivation for further preparations
ahead of the deadline is now high,
with businesses working to alleviate
concerns
© 2018 NetApp, Inc. All rights reserved. — NETAPP CONFIDENTIAL —

10. Which statement best describes your level of concern
about meeting the GDPR deadline?
23.6%
39.7%
24.2%
12.5%
25.9%
52.1%
14.3%
7.7%
41.3%
45.8
9%
3.8%
40.1%
44.7%
11.5%
3.8%
36%
47.4%
11.4%
5.1%
32.6%
45.4%
14.9%
7.1%
0
10
20
30
40
50
60
I have no concerns about us meeting
the GDPR deadline and delivering what
is needed
I am slightly concerned about us
meeting the GDPR deadline and
delivering what is needed
I am concerned about us meeting the
GDPR deadline and delivering what is
needed
I am extremely concerned about us
meeting the GDPR deadline and
delivering what is needed
USA
UK
France
Germany
EMEA
Global
10 © 2018 NetApp, Inc. All rights reserved. — NETAPP CONFIDENTIAL —

11. 40%
40% of business
have confidence in
knowing where their
data is stored
Understanding where data is stored
is the first step for businesses
towards GDPR compliance
© 2018 NetApp, Inc. All rights reserved. — NETAPP CONFIDENTIAL —

12. 10%
In EMEA,
confidence has only
improved by 10%
over 15 months
Understanding where data is stored
is the first step for businesses
towards GDPR compliance
© 2018 NetApp, Inc. All rights reserved. — NETAPP CONFIDENTIAL —

13. Describe how confident you are as a business in knowing
where your data is stored?
30.3%
52.2%
17.5%
44.4%
39.4%
16.2%
49%
33.7%
17.4%
46.2%
32.8%
21%
46.6%
35.2%
18.2%
42.2%
39.8%
18%
0
10
20
30
40
50
60
We are confident in knowing where the data centres of
our service providers are located and where some of
our data is stored
We are confident in knowing where the data centres of
our service providers are located and where all of our
data is stored
We are not confident in knowing where the data centres
of the service providers are located and where our data
is stored
USA
UK
France
Germany
EMEA
Global
13 © 2018 NetApp, Inc. All rights reserved. — NETAPP CONFIDENTIAL —

14. © 2018 NetApp, Inc. All rights reserved. — NETAPP CONFIDENTIAL —
“Companies that control their data control their
destiny, so it is surprising to see that despite the
risk-reduction and operational benefits of GDPR
compliance, so many businesses are still struggling
to meet the deadline. The good news is that there is
still time to engage a GDPR expert to help prioritize
and complete the most critical GDPR compliance
tasks and ensure you, your partners, and your cloud
providers know where your private data is stored.”
Bill Miller, Senior Vice President & Chief
Information Officer at NetApp:

15. © 2018 NetApp, Inc. All rights reserved. — NETAPP CONFIDENTIAL —
“The GDPR, data compliance, and privacy questions
will undoubtedly affect businesses that touch EU
citizens’ data. There is good news though, in spite of
the approaching deadline: The whole ecosystem is
responding to the requirements of GDPR, from
resellers to hyperscale cloud providers to
manufacturers. Enterprises can tap into this expertise,
build up resources, and future proof businesses with
GDPR compliant data management.”
Alexander Wallner, Senior Vice President
& General Manager EMEA, NetApp:

16. 16
Thank You
© 2018 NetApp, Inc. All rights reserved. — NETAPP CONFIDENTIAL —