Editorial & Advertiser disclosure

Global Banking & Finance Review® is an online platform offering news, analysis, and opinion on the latest trends, developments, and innovations in the banking and finance industry worldwide. The platform covers a diverse range of topics, including banking, insurance, investment, wealth management, fintech, and regulatory issues. The website publishes news, press releases, opinion and advertorials on various financial organizations, products and services which are commissioned from various Companies, Organizations, PR agencies, Bloggers etc. These commissioned articles are commercial in nature. This is not to be considered as financial advice and should be considered only for information purposes. It does not reflect the views or opinion of our website and is not to be considered an endorsement or a recommendation. We cannot guarantee the accuracy or applicability of any information provided with respect to your individual or personal circumstances. Please seek Professional advice from a qualified professional before making any financial decisions. We link to various third-party websites, affiliate sales networks, and to our advertising partners websites. When you view or click on certain links available on our articles, our partners may compensate us for displaying the content to you or make a purchase or fill a form. This will not incur any additional charges to you. To make things simpler for you to identity or distinguish advertised or sponsored articles or links, you may consider all articles or links hosted on our site as a commercial article placement. We will not be responsible for any loss you may suffer as a result of any omission or inaccuracy on the website.

Home > Business > Aeriandi study reveals contact centres woefully unprepared for General Data Protection Regulation (GDPR)

Aeriandi study reveals contact centres woefully unprepared for General Data Protection Regulation (GDPR)

Published by Gbaf News

Posted on May 4, 2018

5 min read

Last updated: January 21, 2026

Finance Minister Rachel Reeves advocating for economic growth initiatives - Global Banking & Finance Review — UK Finance Minister Rachel Reeves emphasizes the need for regulatory support to enhance economic growth amidst low output figures. This image highlights her commitment to driving financial progress.

Less than one fifth feel prepared, 60% still need to make changes and 5% are not prepared at all

A new study by voice security services company, Aeriandi, reveals that many UK contact centres still have significant preparation to complete ahead of 25th May, the ‘go-live’ date for the EU’s General Data Protection Regulation (GDPR).

The study, carried out at the Call & Contact Centre Expo in London in March 2018, shows surprisingly low levels of awareness of the regulation itself, and that the number of contact centres on course to comply with the new regulations ahead of, or by, the deadline is low.

Key findings include:

Almost one quarter (24%) do not know what GDPR is.
Over half (60%) still need to make changes and 5% are not prepared at all. Only 19% of respondents are prepared.
70% are aware how GDPR will impact the contact centre, but are not confident they know how.
Less than one third (29%) feel confident they completely understand how GDPR will impact the contact centre.
Less than one third (32%) of respondents say they definitely can deliver GDPR subject access requests (SAR).

Low awareness levels of how GDPR will impact call recording

Contact centres, particularly those that store call recordings, manage a wealth of personal information. The new regulation covers any data that can be used to identify a person – either on its own or in tandem with other data. Any call recordings stored by contact centres will fall under GDPR.

However:

68% of respondents are not confident they understand how GDPR will impact call recording in the contact centre.
6% do not think it will impact call recording in the contact centre at all.
Only around one quarter (26%) are confident they understand how the new regulation will impact call recording in the contact centre.

Access rights have the potential to delay compliance

Known as Subject Access Rights (SARS), the new regulation will give individuals the right to make reasonable requests to access their personal data, as well as the right to request any of their personal call data be erased. This will place more stringent requirements on the storage and back up of customer voice recordings.

However:

More than a quarter of respondents – 28% – stated they are not confident their contact centre can deliver on SARs that meet GDPR requirements.
46% either don’t know, or are not confident their contact centre can deliver on SARs.

Matthew Bryars, co-founder and CEO at Aeriandi, commented: “Organisations need to identify the areas where they are yet compliant and create a plan of action. Contact centres will require a technology approach to meet the challenges effectively. The time to act is now.”

Less than one fifth feel prepared, 60% still need to make changes and 5% are not prepared at all

A new study by voice security services company, Aeriandi, reveals that many UK contact centres still have significant preparation to complete ahead of 25th May, the ‘go-live’ date for the EU’s General Data Protection Regulation (GDPR).

The study, carried out at the Call & Contact Centre Expo in London in March 2018, shows surprisingly low levels of awareness of the regulation itself, and that the number of contact centres on course to comply with the new regulations ahead of, or by, the deadline is low.

Key findings include:

Almost one quarter (24%) do not know what GDPR is.
Over half (60%) still need to make changes and 5% are not prepared at all. Only 19% of respondents are prepared.
70% are aware how GDPR will impact the contact centre, but are not confident they know how.
Less than one third (29%) feel confident they completely understand how GDPR will impact the contact centre.
Less than one third (32%) of respondents say they definitely can deliver GDPR subject access requests (SAR).

Low awareness levels of how GDPR will impact call recording

Contact centres, particularly those that store call recordings, manage a wealth of personal information. The new regulation covers any data that can be used to identify a person – either on its own or in tandem with other data. Any call recordings stored by contact centres will fall under GDPR.

However:

68% of respondents are not confident they understand how GDPR will impact call recording in the contact centre.
6% do not think it will impact call recording in the contact centre at all.
Only around one quarter (26%) are confident they understand how the new regulation will impact call recording in the contact centre.

Access rights have the potential to delay compliance

Known as Subject Access Rights (SARS), the new regulation will give individuals the right to make reasonable requests to access their personal data, as well as the right to request any of their personal call data be erased. This will place more stringent requirements on the storage and back up of customer voice recordings.

However:

More than a quarter of respondents – 28% – stated they are not confident their contact centre can deliver on SARs that meet GDPR requirements.
46% either don’t know, or are not confident their contact centre can deliver on SARs.

Matthew Bryars, co-founder and CEO at Aeriandi, commented: “Organisations need to identify the areas where they are yet compliant and create a plan of action. Contact centres will require a technology approach to meet the challenges effectively. The time to act is now.”