So says a study by compliance solution PORT.im, which also uncovered wide-spread suspicion of how personal data is used. Some 40% of respondents believe that more than 200 organisations currently held their personal data, yet half are unaware they can demand to know the information being held on them.
Worryingly, for businesses ahead of the implementation of GDPR, 61% of those surveyed said they do want to share their data with an organisation even if it directly benefits them.
PORT.im CEO and founder Julian Saunders said: "The results of our research are very concerning. Not only are consumers unaware of their current rights, most are completely unaware of the sweeping new rights they will have in only a few months. Clearly, many businesses are breaking current rules by contacting people without consent.
"GDPR is the most fundamental change to ever happen to data privacy. It is designed to restore trust, accountability, security and transparency. Reckless use of data and lacklustre security now means that many people are unwilling to knowingly share their data.
"Ahead of the implementation of GDPR, where organisations will need to work very hard to continue to hold, collect and use personal data, this lack of trust and understanding of data rights is a huge problem. Many organisations need this flow of data to function."