In this report, the IAPP and TrustArc offer privacy professionals around the globe a look at how their colleagues are implementing privacy requirements. This is the latest in a series of reports designed to help companies benchmark their own privacy practices against those of their partners and competitors.

In this report, we explore whether and how a company’s size, location, sector and geographic reach affect their approach to data protection. We look at whether companies have adopted a single global data protection strategy or are segmenting data subjects by jurisdiction, as well as the factors influencing that choice. We identify current areas of focus for privacy professionals and consider how legal requirements are affecting data-processing practices. We also consider how the guidance offered by outside attorneys and consultants differs from the practices adopted by the companies they serve.