Big changes are on the horizon for data security. After four years of preparations, the European Union's General Data Protection Regulation goes into effect on May 25, and it will have big implications for associations that handle EU residents’ personal data.

But more than a third of business executives and board members feel unsure about whether their organization is prepared to handle GDPR, and 40 percent say they’re taking a wait-and-see approach to how the new regulation will affect their business. Only 32 percent feel satisfied with the progress they’ve made.

Source: ISACA, “Better Tech Governance Is Better for Business”

[This article was originally published in the Associations Now print edition, titled " Data: Ready for GDPR?"]