Many firms are unprepared for new European regulations that will require higher standards of data protection, a survey reveals.