Companies in KSA and UAE increasingly concerned about data protection, EY survey finds

Dubai, UAE, 19 February 2018

  • Share
  • 60% consider data protection and data privacy compliance a growing concern
  • Yet only 18% of respondents have a plan in place for General Data Protection Regulation (GDPR)

With less than four months to go until the General Data Protection Regulation (GDPR) comes into force on 25 May 2018, data privacy and protection is top of mind for business leaders in the GCC. According to the third biennial EY Global Forensic Data Analytics Survey, 60% of KSA and UAE respondents expressed increasing concern about data protection and data privacy compliance, and 82% still do not have a plan in place to comply with the EU legislation.

The EU’s GDPR will require all businesses to strengthen the protection of personal data of all EU citizens in 28 member states.

Launched today, the survey analyzes the legal, compliance and fraud risks global companies face and the use of forensic data analytics (FDA) to manage them.

FDA, which is the collection and analysis of all types of data with the objective to manage legal, compliance and fraud risks, can be used to better monitor, prevent, and predict anomalies in business activities and transactions.

According to the survey, respondents expressed a strong belief in the value of FDA; 100% of the respondents in UAE and KSA who use FDA towards regulatory compliance agree that it has been effective.

Charles De Chermont, EY MENA Fraud Investigation & Dispute Services Leader, says:

“The introduction of GDPR and data protection and data privacy laws are major compliance challenges for all organizations, including those in the MENA region. Companies that embrace a GDPR-compliant approach with their FDA efforts can gain a competitive edge over those that choose to avoid FDA due to the cost of compliance and regulatory concerns.”

Increased adoption of FDA to manage risks

In KSA and UAE, companies are looking at a variety of FDA techniques such as risk scoring and aggregation techniques, user behavioral analytics and social medial analytics to manage their risk. The adoption rate for emerging technologies in the UAE and KSA is high; 53% of companies are already using or likely to adopt robotic process automation compared with the global average of 39%.

“The majority of organizations in the UAE and KSA are making significant investments in emerging technologies to help them mitigate cyber risks and attacks. Compared to global adoption rates, the region is in a strong position when it comes to using data analytics to detect potential anomalies and risks, although this tends to be more on an ad-hoc basis where only 33% of respondents versus 50% globally had implemented continuous monitoring solutions,” comments Paul Marsters, Executive Director, EY MENA Fraud Investigation & Dispute Services.

Investment in people and skills key to unlocking the full potential of FDA

Overall, the report highlights how increased adoption of, and spending on advanced FDA technologies, needs to be matched with greater investment in skilled resources. A vast majority of KSA and UAE respondents believe that the full potential of FDA is reliant on investments in the right technology and sources, implemented by subject matter experts.

Charles says: “Without the right people managing the technology, the real value of FDA can’t be used to manage risk. While it’s encouraging to see that investment in advanced FDA is increasing, companies need to hire the right talent such as data science and IT professionals and compliance and risk experts who are responsible for designing and reviewing the results of the analytics. Along with the right technology and integrated data sources, only then will companies be able to successfully manage their risk profile effectively.”

- Ends -

EY | Assurance | Tax | Transactions | Advisory

About EY

EY is a global leader in assurance, tax, transaction and advisory services. The insights and quality services we deliver help build trust and confidence in the capital markets and in economies the world over. We develop outstanding leaders who team to deliver on our promises to all of our stakeholders. In so doing, we play a critical role in building a better working world for our people, for our clients and for our communities.

EY refers to the global organization, and may refer to one or more, of the member firms of Ernst & Young Global Limited, each of which is a separate legal entity. Ernst & Young Global Limited, a UK company limited by guarantee, does not provide services to clients. For more information about our organization, please visit

The MENA practice of EY has been operating in the region since 1923. For more than 90 years, we have grown to more than 6,000 people united across 20 offices and 15 countries, sharing the same values and an unwavering commitment to quality. As an organization, we continue to develop outstanding leaders who deliver exceptional services to our clients and who contribute to our communities. We are proud of our accomplishments over the years, reaffirming our position as the largest and most established professional services organization in the region.

© 2018 EYGM Limited.
All Rights Reserved.

This material has been prepared for general informational purposes only and is not intended to be relied upon as accounting, tax, or other professional advice. Please refer to your advisors for specific advice.