VinciWorks survey reveals that fewer than 2% of organisations are absolutely prepared for the Information Use and Entry Act, with workers coaching rising as the one greatest compliance hole.
New analysis performed by VinciWorks, the compliance coaching and software program supplier, has revealed that almost all of UK organisations are unprepared for the Information Use and Entry Act (DUAA), with widespread uncertainty and a vital lack of coaching, leaving firms uncovered to compliance breaches.
The survey of 373 compliance professionals discovered that simply 1.6% of organisations say they’re absolutely prepared for the brand new regulation, which can exchange components of the UK GDPR in 2025. Nearly three-quarters (77%) admit they’re both not ready, uncertain, or solely starting preparations.
47% of respondents cited updating governance, coaching and vendor administration as their greatest problem. In the meantime, 39% mentioned their prime precedence over the subsequent six months is coaching workers throughout the enterprise.
‘Human error and errors’ stay the highest knowledge safety danger, in line with 56% of respondents, far forward of phishing (12%). The outcomes point out that even well-intentioned workers might generate substantial publicity for his or her organisations within the absence of sufficient consciousness and schooling.
Sector tendencies point out that the authorized and monetary providers industries are the least ready, with fewer than one in twenty prepared for DUAA compliance. The schooling sector, whereas extra conscious, reveals excessive ranges of uncertainty – 30% say they’re “undecided” the best way to assess their readiness.
Nick Henderson-Mayo, Head of Compliance at VinciWorks, mentioned: “Most cyber compliance failures begin with human error, and our analysis reveals that consciousness is the lacking piece, not know-how. Organisations can’t depend on IT programs alone; they should construct a tradition of understanding and accountability throughout each workforce.”
“The organisations investing in higher coaching and consciousness all through the worker lifecycle would be the ones who keep away from fines, and construct lasting belief with shoppers and regulators.”
As organisations face altering knowledge accountability beneath the DUAA, VinciWorks is asking on HR, L&D and compliance groups to prioritise coaching and governance updates instantly.
How VinciWorks will help your organisation put together for DUAA compliance
VinciWorks gives an entire suite of coaching, instruments and sources to assist organisations meet the necessities of the Information Use and Entry Act (DUAA) and keep compliance with the UK GDPR framework.
UK GDPR and DUAA Coaching Programs
Guarantee workers in any respect ranges perceive their knowledge safety obligations beneath UK GDPR and the DUAA. VinciWorks’ interactive, absolutely customisable programs are designed to construct sensible consciousness and accountability throughout each workforce.
Free Information to the Information Use and Entry Act 2025
This sensible information breaks down the important thing adjustments launched by the DUAA, together with new lawful bases for knowledge processing; how guidelines on cookies, advertising and AI are evolving; what DUAA means for worldwide knowledge transfers; key compliance actions and sector-specific impacts; and a sensible guidelines
Omnitrack GDPR Registers Workflow Resolution
VinciWorks’ Omnitrack platform simplifies DUAA and GDPR compliance by centralising knowledge registers, DSAR administration, breach logs and accountability reporting – guaranteeing your governance frameworks are prepared for regulatory scrutiny.
VinciWorks survey reveals that fewer than 2% of organisations are absolutely prepared for the Information Use and Entry Act, with workers coaching rising as the one greatest compliance hole.
New analysis performed by VinciWorks, the compliance coaching and software program supplier, has revealed that almost all of UK organisations are unprepared for the Information Use and Entry Act (DUAA), with widespread uncertainty and a vital lack of coaching, leaving firms uncovered to compliance breaches.
The survey of 373 compliance professionals discovered that simply 1.6% of organisations say they’re absolutely prepared for the brand new regulation, which can exchange components of the UK GDPR in 2025. Nearly three-quarters (77%) admit they’re both not ready, uncertain, or solely starting preparations.
47% of respondents cited updating governance, coaching and vendor administration as their greatest problem. In the meantime, 39% mentioned their prime precedence over the subsequent six months is coaching workers throughout the enterprise.
‘Human error and errors’ stay the highest knowledge safety danger, in line with 56% of respondents, far forward of phishing (12%). The outcomes point out that even well-intentioned workers might generate substantial publicity for his or her organisations within the absence of sufficient consciousness and schooling.
Sector tendencies point out that the authorized and monetary providers industries are the least ready, with fewer than one in twenty prepared for DUAA compliance. The schooling sector, whereas extra conscious, reveals excessive ranges of uncertainty – 30% say they’re “undecided” the best way to assess their readiness.
Nick Henderson-Mayo, Head of Compliance at VinciWorks, mentioned: “Most cyber compliance failures begin with human error, and our analysis reveals that consciousness is the lacking piece, not know-how. Organisations can’t depend on IT programs alone; they should construct a tradition of understanding and accountability throughout each workforce.”
“The organisations investing in higher coaching and consciousness all through the worker lifecycle would be the ones who keep away from fines, and construct lasting belief with shoppers and regulators.”
As organisations face altering knowledge accountability beneath the DUAA, VinciWorks is asking on HR, L&D and compliance groups to prioritise coaching and governance updates instantly.
How VinciWorks will help your organisation put together for DUAA compliance
VinciWorks gives an entire suite of coaching, instruments and sources to assist organisations meet the necessities of the Information Use and Entry Act (DUAA) and keep compliance with the UK GDPR framework.
UK GDPR and DUAA Coaching Programs
Guarantee workers in any respect ranges perceive their knowledge safety obligations beneath UK GDPR and the DUAA. VinciWorks’ interactive, absolutely customisable programs are designed to construct sensible consciousness and accountability throughout each workforce.
Free Information to the Information Use and Entry Act 2025
This sensible information breaks down the important thing adjustments launched by the DUAA, together with new lawful bases for knowledge processing; how guidelines on cookies, advertising and AI are evolving; what DUAA means for worldwide knowledge transfers; key compliance actions and sector-specific impacts; and a sensible guidelines
Omnitrack GDPR Registers Workflow Resolution
VinciWorks’ Omnitrack platform simplifies DUAA and GDPR compliance by centralising knowledge registers, DSAR administration, breach logs and accountability reporting – guaranteeing your governance frameworks are prepared for regulatory scrutiny.


















