The Challenge

After the routine requirements gathering and market investigations, the selection of OneTrust as a privacy solution
to meet the needs was straightforward.
However, it would soon become clear that the tool was not going to answer some core issues that needed to be addressed: How to be organised so that stakeholders within data protection knew their roles and responsibilities?
And a more fundamental realisation – data privacy needs data management and vice versa, and how to integrate this into the overall solution?
At first, the aim was to help the local Data Protection teams and their GDPR business stakeholders and facilitate the proper management of the information assets. By mapping the existing business processes, it became clear that, due to the volume of information and the increasing complexity of the business activities, the company was facing profound challenges, mainly due to a lack of maturity in data management and information governance.

The challenges that we encountered throughout the projectwere:

• Lack of clear ownership of data, resulting in conflicts of interest between stakeholders that lead to adverse outcomes for the organisation
• The highly decentralised nature of the organisation does not rhyme well with the transversal nature of data: the operating model was a hindrance to the strategic objectives
• Different Countries of Operations move at differed paces, with different priorities. In such cases, Data Trust Associates applies a multidisciplinary approach aimed at combining a sense of short-term pragmatism, with the need for a long-term vision of data from a holistic perspective. The latter allows the customer to develop a data strategy that aligns with all business departments and brings enterprise-wide value.

Our Approach

At the beginning of the assignment, the focus was on helping the local Data Protection teams and their GDPR business stakeholders to enable proper management of the information assets. By mapping the existing business processes, it became clear that the volume of information and the increasing complexity of the business activities led to profound challenges due to a lack of maturity in data management and information governance.