U.S. companies haven’t learned much from the missteps they made while preparing for the European Union’s General Data Protection Regulation, suggests a new study on data privacy regulation compliance. 

About half of the survey respondents whose companies are affected by GDPR revealed they had failed to meet last May’s deadline to comply with the regulations—and 70% said the data privacy compliance systems they established or plan to have in place are incapable of adapting to new regulations.