A global music publisher with operations in over 30 different countries needed support in understanding and mapping of their personal data processing activities.
Creating documentation of the processing activities, IT assets and third-parties processing personal data, to provide a foundation for the development of a global privacy program. The client required a manual creation of their data inventories and undertook this exercise as a precursor to aligning their development of a privacy program and supporting operational requirements of applicable laws and regulations.
our approach
Myna worked with the client developing an approach that maximized efficiencies and provided a comprehensive mapping of all data processing activities for the 30 global locations.
- Identified a Pilot offices in each of the 5 geographical region
- Led data gathering workshops with the key stakeholder and process owners at the Pilot offices.
- Completed and verified spreadsheet-based data inventories for each of the processing activities at each of the Pilot offices (approx. 30-35 per office) .
- Led weekly support and guidance calls (in language) for the non-pilot offices, by region to assist them in verifying and completing their data inventories.
- Completed the remaining 25 global office by utilizing the Pilot data inventory for their region.
Program Outcomes
- A Privacy Program Assessment Framework was created, validated and accepted by the client
- An executive Summary was provided of our findings and recommendations
- A detailed final report providing identified gaps (risk rated), quick wins, and estimated effort levels to address each gap.
- A Maturity Assessment for each Category, with supporting documentation for decisions to determine the best level to meet the client’s needs
- Strategic Roadmap to support the implementation efforts to address the findings.
