Closing Compliance Gaps
An entertainment company operating primarily across the U.S. and EU markets needed to establish a centralized data map to improve visibility into its processing activities. Given its operations in the EU, the organization was expected to maintain a documented data map or RoPA to meet GDPR compliance requirements.
This compliance gap impacted key stakeholders, mainly Legal and Technology, with additional discovery involving Advertising, HR, Marketing, Operations, and Compliance.
To address these challenges, the company partnered with Myna to strengthen its compliance posture and to help implement a OneTrust module that collects information about its processing activities and populates the data map accordingly.
our approacH:
To achieve the client’s objectives, Myna:
- Conducted scoping and discovery sessions to better understand the organization’s current OneTrust setup and overall compliance goals.
- Collaborated with stakeholders to create an assessment that captures applicable Data Mapping information for the in-scope processing activities, vendors, and assets, and recommended enhancements to the existing PIA template.
- Worked with various organizational groups to assist with completing the drafted assessment.
- Trained stakeholders on the OneTrust configuration and created reports that help to extract key information from the completed assessments.
- Developed a risk matrix/template to flag potential risks identified in the assessments.
The project was completed over a six-month timeline and successfully incorporated Myna’s best practice recommendations, ensured alignment with relevant jurisdictions, and maintained organization-specific standards and language.
Program Outcomes
- Delivered a completed and populated data map consisting over 30 individual processing activities, along with several custom reports that auto-update based on the current state of the data map.
- Strengthened alignment with in-scope privacy jurisdictions and aligned with industry best practices.
- Established a clear, manageable process for annual reassessments.
- Enhanced the PIA template, reports, and dashboards, and configured the PIA to capture information that is valuable to the team for reporting purposes.
- Completion of data mapping led to process improvement initiatives for Cookies and TPRM.
