A leading global music publisher with operations in over 30 different countries was looking to develop their global privacy program and needed support in understanding and mapping their personal data processing activities across their decentralized systems and processing operations.
The client required a manual creation of a data mapping framework to capture key attributes of the information lifecycle of related personal data for customers and employees.
The extensive mapping of over 400 processing activities needed to be completed by a hard deadline and within a specific budget, requiring Myna to develop a proactive methodology that enabled the client to achieve their goals.
our approach
Myna worked with the client to develop a methodology that maximized efficiencies and provided a comprehensive mapping of all data processing activities across the 30 global locations.
Key activities included:
- Defining 5 geographical regions and identifying pilot offices in each of the regions.
- Leading data-gathering workshops with key stakeholders and process owners at the pilot offices.
- Completing and verifying spreadsheet-based data maps for each processing activity at the pilot offices (approximately 30-35 per office).
- Facilitating weekly support and guidance calls for the non-pilot offices by region, helping them verify and complete their data maps.
- Completing the remaining 25 global offices by utilizing the pilot data maps aligned to each region.
Program Outcomes
- All 30 global locations completed data mapping, capturing the lifecycle of personal data for each process as well as identifying associated IT assets and third-party processors.
- Data Maps supported updates to the clients Privacy Notices, Data Subject Rights process, and the creation of the global privacy program.
- Executive presentation was delivered to senior stakeholders and outside counsel, summarizing high-level observations and providing recommendations to mitigate gaps and risks observed.
