"Secure Creators" (organizations with more advanced cybersecurity functions than their peers) were more involved in efforts to improve customer experience than their peers (53% vs. 42%).

61% said privacy awareness training was separate from security training.

96% of respondents consider compliance/legal experience important in determining if a privacy candidate was qualified.

94% of respondents consider prior hands-on experience in a privacy role important in determining if a privacy candidate was qualified.

12% of respondents' organisations experienced a material privacy breach in the past 12 months.