among mid to large enterprises with revenues from 25 million to more than 5 billion U.S. dollars
Supplementary notes
The source defines a company as:
- non-compliant if the company's privacy policy has no mention of CCPA,
- partially compliant if the company's privacy policy mentions CCPA but mechanisms to submit Data Subject Access Rights (DSAR) requests is rudimentary,
- compliant if the company redirects CCPA DSAR requests to a privacy rights management solution.
*In the 4th quarter of 2022, the source examined 461 B2C companies and 785 B2B companies.
Citation formats
GDPR preparedness among U.S. companies Q4 2022, by company type
As of the third quarter of 2022, approximately 93 percent of U.S. B2B companies legally expected to comply with the General Data Protection Regulation (GDPR) were underprepared to meet the privacy legislation. The companies were using manual services that were most likely to cause errors and were expensive at the same time. Among B2C companies, nearly 92 percent provided only manual mechanisms of privacy rights management. In comparison, B2B companies were more likely to provide GDPR automation than B2C companies.
Profit from the additional features of your individual account
Currently, you are using a shared account. To use individual functions (e.g., mark statistics as favourites, set
statistic alerts) please log in with your personal account.
If you are an admin, please authenticate by logging in again.
Learn more about how ÌÇÐÄÆƽâ°æ can support your business.
Cytrio. (February 15, 2023). General Data Protection Regulation (GDPR) readiness among companies in the United States as of 4th quarter 2022, by company type [Graph]. In ÌÇÐÄÆƽâ°æ. Retrieved July 21, 2026, from /statistics/1338061/gdpr-readiness-united-states/
Cytrio. "General Data Protection Regulation (GDPR) readiness among companies in the United States as of 4th quarter 2022, by company type." Chart. February 15, 2023. ÌÇÐÄÆƽâ°æ. Accessed July 21, 2026. /statistics/1338061/gdpr-readiness-united-states/
Cytrio. (2023). General Data Protection Regulation (GDPR) readiness among companies in the United States as of 4th quarter 2022, by company type. ÌÇÐÄÆƽâ°æ. ÌÇÐÄÆƽâ°æ Inc.. Accessed: July 21, 2026. /statistics/1338061/gdpr-readiness-united-states/
Cytrio. "General Data Protection Regulation (Gdpr) Readiness among Companies in The United States as of 4th Quarter 2022, by Company Type." ÌÇÐÄÆƽâ°æ, ÌÇÐÄÆƽâ°æ Inc., 15 Feb 2023, /statistics/1338061/gdpr-readiness-united-states/
Cytrio, General Data Protection Regulation (GDPR) readiness among companies in the United States as of 4th quarter 2022, by company type ÌÇÐÄÆƽâ°æ, /statistics/1338061/gdpr-readiness-united-states/ (last visited July 21, 2026)
General Data Protection Regulation (GDPR) readiness among companies in the United States as of 4th quarter 2022, by company type [Graph], Cytrio, February 15, 2023. [Online]. Available: /statistics/1338061/gdpr-readiness-united-states/
