Some firms continue to fall behind in GDPR and CCPA compliance. They have not changed their data handling practices. Ilia Sotnikov, of Netwrix, lists five reasons why organizations are failing. For one, they are storing too much data. For another, they don’t categorize the personal data they gather.