61% said privacy awareness training was separate from security training.

68% of respondents said that addressing privacy with documented privacy policies, procedures, and standards was mandatory.

21% said the chief privacy officer was primarily accountable for privacy.

96% of respondents consider compliance/legal experience important in determining if a privacy candidate was qualified.

74% said their organisation’s privacy strategy was aligned with organisational objectives.

28% said more than half of technical privacy applicants were well qualified for the role.

37% of privacy professionals cited a lack of competent resources as an obstacle.

57% of respondents believed their board of directors adequately prioritized privacy.

47% of respondents indicated a lack of training or poor training as a common privacy failure.

42% of respondents indicated a data breach/leakage was a common privacy failure.

46% of respondents felt their technical privacy team was understaffed.

67% of respondents said their enterprise practiced privacy by design when building new applications and services.

38% of privacy professionals cited a complex international legal and regulatory landscape as an obstacle.

36% of respondents felt their privacy budget was appropriately funded.

29% of respondents indicated that more than half of legal/compliance privacy applicants were well qualified for the role.

41% indicated not practicing privacy by design was a common privacy failure.

35% said the number of data subject requests they received increased in the past year.

59% said resource shortages made their privacy role more stressful.

48% of enterprises are using training to allow nonprivacy staff who are interested to move into privacy roles.

73% of respondents said expert-level privacy professionals were the most difficult to hire.