Helping a Leading Financial Institution Ensure GDPR Compliance


Back in 2018, a leading financial institution had to quickly prepare for General Data Protection Regulation (GDPR) legislation. But, like many organisations, they lacked the understanding or expertise required. This FTSE 100 company needed to find an organisation with experience in delivering data privacy strategies – and that’s where Maevern comes in.

They were initially recommended to us by one of our business partners (who also happens to be a service provider for the client), and we’ve since made a lasting impact on the organisation. Not only are they now fully compliant with GDPR, but their systems and processes are future-proofed and robust.

When we first began working with our client, GDPR wasn’t yet in effect, but it was soon coming into force. As such, they needed to quickly change the way they collected, stored, accessed, used, and transferred personal data in order to remain compliant with industry regulations. However, like any change in the law, GDPR presented various challenges for the organisation.

Not having a strategy in place by the time GDPR came into effect on 25th May 2018 would have left potential fines running into the millions. It was clear that the client required a team with the right expertise to assist with designing the governance, risk and compliance strategy to ensure they adhered to GDPR moving forward.

Over a period of nine months, we worked with the client to deliver operational processes and policies, as well as vendor management and staff training solutions.

By engaging staff collaboratively, we were able to understand the current data landscape, identify pain points, and look for opportunities for improvement to ensure compliance with the looming regulations.

Since working with the client, a robust strategy has been embedded into their daily operations to guarantee GDPR compliance. One such example is a very sleek process responsible for handling data subject access requests. This allows staff to quickly and appropriately respond to requests within the confines of their obligations as data controller.

Our client was highly impressed by our ability to come in and quickly determine the areas of improvement in their current policies and processes. As a result, they’re now greatly satisfied with the position that their organisation is in, and can continue to serve their customers with confidence.

While the project has long ended, our client relationship managers offer our ongoing support whenever the client needs it, giving them peace of mind that they can maintain best practices in the future.

We pride ourselves on never leaving businesses in the dark once an engagement is complete. We’re always ready to work with our existing clients to further develop previous work or take on new projects. So if you’re looking to take data from an afterthought to a core business asset, don’t hesitate to get in touch with our team today. We’d be happy to help.


READY TO KICK-START YOUR CHANGE INITIATIVE?

Get in touch to see how we can help you achieve your strategic vision.