A recent report from the Global Privacy Enforcement Network based on intelligence its member DPAs gathered from public and private organizations focused on data privacy accountability. GPEN found a “good understanding of the basic concepts of accountability” as to data privacy governance, but room for improvement in (1) keeping training updated and refreshed; (2) implementing measures to handle data subject complaints and inquiries; (3) monitoring adherence to applicable data protection standards. We analyze GPEN’s key findings, with insights from Ropes & Gray attorney Edward Machin. See also “Companies May Need to Re-Examine Approach to Breach Response Preparedness According to Experian Survey” (Mar. 26, 2019).