According to data from a study on #cybersecurity:
• Only 36% of employees say they pay full attention during #security #training;
• Only 28% of employees think these programs are worthwhile;
• 50% of employees say they have failed a #phishing simulation test, and about 20% say they don't even show up for scheduled security training sessions;
• Failure rates for phishing simulations are three times higher in the youngest cohort (18-24) than in the oldest (at least 55);
• Older employees are four times more likely to understand cybersecurity policies and five times more likely to follow them.
And in the same vein, another research says:
• 1 in 5 employee is convinced they can't be the target of #cybercriminals;
• 76% of employees think cybersecurity is an IT responsibility;
• 87% of employee consider cybersecurity training is interesting;
• 95% of cybersecurity issues are the result of human error.
You might see some contradictions between the two studies, but that's not the point I want to make.
Read those again, but change "cybersecurity" for "#privacy and #dataprotection" and I wouldn't be surprised if the results were similar.
#GDPR #NoConsentNoTracking #dataethics #datacompliance
(Sources in comment)