--- description: With GDPR now over a year old, many SMEs are still failing to conduct even basic elements of GDPR compliance, such as data protection impact assessments.  image: https://gdm-localsites-assets-gfprod.imgix.net/images/capterra/og_logo-e5a8c001ed0bd1bb922639230fcea71a.png?auto=format%2Cenhance%2Ccompress title: GDPR turns one – is your SME compliant? - Capterra --- # GDPR turns one – is your SME compliant? Canonical: https://www.capterra.co.uk/blog/840/gdpr-turns-one-is-your-sme-compliant Published on 26/08/2019 | Written by Sonia Navarrete. ![GDPR turns one – is your SME compliant?](https://images.ctfassets.net/63bmaubptoky/KL8zfDxIFqtQrfbbSZMDmJp65AcHOnud0bWK0VWXjLw/6f84c6fba9c1fd7f8c32070e82372c69/shutterstock_1055066480.png) > On 25 th May 2018, the General Data Protection Regulation (GDPR) became law, making imperative for all firms that process the personal data of EU citizens to do more to protect that data, while also providing individuals with new rights.  ----- ## Article Content On 25 th May 2018, the General Data Protection Regulation (GDPR) became law, making imperative for all firms that process the personal data of EU citizens to do more to protect that data, while also providing individuals with new rights. However, with the regulation now over a year old, there’s evidence that many SMEs are still failing to conduct even basic elements of GDPR compliance, such as data protection impact assessments. Here, we will look at the current situation between SMEs and GDPR  and ask what more can be done to ensure compliance. Why GDPR mattersBefore we look at what has happened over the past year, it’s worth noting of  of what’s at stake for SMEs. Under GDPR, if a business suffers a data breach and is found not to have implemented appropriate data protection measures, it faces fines of as much as 4% of its global turnover. As well as the significant brand damage that can occur with large scale data breaches and the resulting loss of customer confidence, ensuring GDPR compliance couldn’t be more important for firms of all sizes, as they would also suffer from the financial consequences.  The fines have started Over the past year regulators in Europe have shown that they are ready to start checking who is following the law correctly and start fining those who are not.. In the UK, for example, the Information Commissioner’s Office (ICO) has announced its intention to fine British Airways and Marriott International £183 million and £99 million respectively for recent data breaches. According to the International Association of Privacy Professionals, the first year of GDPR saw a total of €56 million in fines. . While the headlines have focused on large enterprises, SMEs should be under no illusion that the regulators won’t come for them. Are SMEs prepared?According to a study, 30% of European firms  lack confidence that their business is compliant. The research also found that 21% of mid-market businesses admit having no cybersecurity strategy in place. Statistics like these suggest that when it comes to GDPR many businesses are sticking their heads in the sand and hoping they will go unnoticed by regulators and cybercriminals alike. For such firms, the risk of receiving fines for non-compliance are very high. GDPR compliance need not be complicatedThe good news is that once a company realises that it has no choice but to act on GDPR rules, there are a number of solutions available. Such tools enable firms to, for example, rapidly carry out data protection impact assessments on projects so they can ensure the work carried out is GDPR compliant from day one. The challenge you may find is knowing which software package to choose. Different GDPR compliance software services come with different features such as access control, compliance management, consent management and sensitive data identification, and knowing which will meet your specific compliance shortfalls can be a challenge. Make GDPR ‘year two’ a successGDPR is now in full effect and momentum is gathering around regulatory action, so  if you have left your GDPR preparations this long, now really is the time to act. The regulation applies equally to SMEs as it does to large enterprises. Fortunately, the market has what you need to achieve compliance rapidly – visit our  GDPR compliance software list to search over 125 available solutions today and take a step closer to compliance. ## About the author ### Sonia Navarrete Sonia is a Senior Content Analyst at Capterra, helping SMEs choose the best software. She published in Raconteur, Computer Weekly and IT Pro. Journalist and PR. ## Related Categories - [Accounting Software](https://www.capterra.co.uk/directory/1/accounting/software) - [CRM Software](https://www.capterra.co.uk/directory/2/customer-relationship-management/software) - [ERP Systems](https://www.capterra.co.uk/directory/9/enterprise-resource-planning/software) - [Human Resources Software](https://www.capterra.co.uk/directory/5/human-resource/software) - [Project Management Software](https://www.capterra.co.uk/directory/30002/project-management/software) ## Related Articles - [76% of UK businesses will spend more on software in 2025: Here's why](https://www.capterra.co.uk/blog/7557/uk-software-buying-trends-2025-research) - [Smart cities in the UK: Balancing convenience and security for urban transformation](https://www.capterra.co.uk/blog/4185/Smart-city-habits-in-UK) - [The benefits of apprenticeships for employers](https://www.capterra.co.uk/blog/1216/the-benefits-of-apprenticeships-for-employers) - [Five ‘horrors’ that keep HR managers up at night](https://www.capterra.co.uk/blog/983/five-hr-issues-that-keep-hr-managers-up-at-night) - [Free Software Resources to Help Your Business During The Coronavirus Outbreak](https://www.capterra.co.uk/blog/1375/free-software-resources-help-business) ## Links - [View on Capterra](https://www.capterra.co.uk/blog/840/gdpr-turns-one-is-your-sme-compliant) - [Blog](https://www.capterra.co.uk/blog) - [Home](https://www.capterra.co.uk/) ----- ## Structured Data