The results of the survey conducted by the Data Security Council of India (DSCI) and Deloitte India indicate that organizations are pursuing a wide range of readiness approaches. They are adopting leading practices to monitor, assess and manage privacy-related risks and steer the GDPR journey. A proactive approach towards GDPR goes beyond a regulatory requirement, helping organizations demonstrate their trustworthiness. Therefore, GDPR drives a culture of privacy by design in an organization.