Data protection is an integral part of the digital economy – and at the same time a key challenge for companies. Eight years after the General Data Protection Regulation (GDPR) came into force, this study report shows how companies in Germany assess the current regulation and what impact it has on everyday business operations. The results highlight where the implementation effort is particularly high, what practical hurdles exist and where the economy sees a need for reform. At the same time, it highlights the role of international data transfers, the practice of data protection supervision and the growing importance of artificial intelligence. The study is based on a representative survey of 603 companies with 20 or more employees in Germany conducted in 2025.