FINANCIAL MARKET INFRASTRUCTURE PROVIDER
Identifying Personal Data: Assessing Application Landscape for GDPR Compliance
A Swiss financial market infrastructure provider set out to identify and assess personal data processing across more than 70 applications to improve transparency and address GDPR requirements.
INDUSTRY
Financial Market Infrastructure
DURATION
6 months
CAPABILITIES
Data Governance
Regulatory Compliance
Business Analysis
Challenge
It was unclear which applications contained personal data and how this data was processed across the organization, limiting transparency and increasing regulatory risk.
The challenge was to identify relevant data processing activities, assess potential compliance gaps and establish a consistent approach to GDPR requirements across business units.
Contribution
Analyzed the applications landscape to identify personal data processing activities and assess their relevance under GDPR.
Developed and applied structured data processing questionnaires to collect information, identify potential compliance gaps and document findings across business units.
Outcome
A consolidated overview of personal data processing across more than 70 applications, providing greater transparency and a basis for assessing GDPR compliance.
The documented findings helped identify areas requiring further action and informed data governance and compliance measures.