Study Shows: German Companies Are Paying Increasing Attention to Data Security

Pfungstadt, August 20, 2025 – More than 86 percent of companies in Germany are currently planning concrete measures to protect their data and remain compliant. This is the result of a survey conducted by TechConsult on behalf of eperi. The study examined the extent to which organizations are already implementing measures to ensure compliance with German and European data protection regulations when using U.S.-based cloud services.

Companies Have Recognized the Signs of the Times

Against the backdrop of an agile business landscape, changing legal frameworks, and increasing complexity of IT structures, it is encouraging to see that awareness of protecting sensitive corporate data has clearly intensified. In the TechConsult survey, 41.7 percent of companies in Germany stated that they conduct independent penetration tests and security audits, while 37.4 percent rely on their own data encryption, with control remaining solely in their hands. 7.1 percent highlighted that they are planning general data protection measures, but without specifying methodology or procedures. These results show that companies now recognize that data protection and compliance are essential for both security and future viability.

The majority of penetration tests and security audits (60.6 percent) are carried out by organizations with 2,000 to 4,900 employees. When clustering the responses by function of the respondents, the survey shows that IT specialists (46.4 percent) and business decision-makers (37 percent) place their trust in audits and tests. The picture looks different when it comes to the use of encryption technologies. Here, 41.1 percent of corporations as well as companies with 500–1,900 employees rely on encryption. Evaluations are also more balanced among professionals: 38.6 percent of business representatives and 36.1 percent of IT professionals see encryption as a good way to protect critical company data.

Companies in critical infrastructure rely on encryption

A closer look at industries reveals that encryption is used above average in public administration (43.5 percent), banking and insurance (46.5 percent), and healthcare and social services (50 percent). Andreas Steffen, CEO of eperi: “These companies and organizations clearly take their responsibility as part of our country’s critical infrastructure very seriously. And they seem to understand that modern encryption technology allows them to protect themselves easily and reliably against the consequences of cyberattacks and data theft—while also ensuring compliance.” One exception appears to be the energy and utilities sector. Here, only 37.5 percent rely on encryption, while 50 percent use penetration tests and security audits.

Conclusion

The times have changed, cyberattacks have become daily reality, and data protection and compliance are more than just a nice-to-have. Companies have recognized this. That is why the majority rely on modern methods and technologies that help them protect their sensitive data and processes.