18-02-21 Telia Case7.Indd

Total Page:16

File Type:pdf, Size:1020Kb

18-02-21 Telia Case7.Indd nortal.com CASE STUDY Telia's journey to GDPR compliance DATA PROTECTION The road to GDPR compliance is long and complicated. With the help of Nortal, Telia has gone through several steps to assure its customers their data is well protected. TELIA BECOMES GDPR COMPLIANT Telia's cornerstones of GDPR To become compliant with the European Union's Telia is not alone — GDPR will make life significantly new General Data Protection Regulation (GDPR), more complicated for all the companies that process Telia Estonia, a branch of a major telecom company any kind of personal data on the residents of the in the Nordics, had to undergo changes in its union. GDPR makes people owners of their personal business processes, organizational practices and IT data, giving them the right to obtain an overview of infrastructure. Nortal helped Telia through several what kinds of data have been collected and how stages of that complex and lengthy journey. these have been processed. The Challenge On its road to GDPR compliance, Telia log files. The problem was that all these Risks of GDPR Estonia faced several challenges. GDPR log files were scattered over different gives customers the right to demand servers, making it very time consuming GDPR puts companies that deal with vast quantities information on what kinds of data to find specific events in the logs and of personal information at companies have collected about them, the staff had to go through the systems considerable risk. Fines order the companies to delete the data, manually. for non-compliance can be or set restrictions on which data can be up to 20 million euros or 4% of a company’s global processed. Recognizing the seriousness of the annual turnover, whichever challenge early on, Telia set out to find is bigger. An even more As a major telecom company, Telia has a partner who could automate this serious problem, however, several hundred different information process and more broadly bring all data is the possible negative reaction from customers if systems, many containing personal and business practices in line with the it becomes public that the information, and all of these produce regulation. company has not protected its data well enough or even worse, has misused it. 2844,56 The Solution 6589,56 Nortal analysts, data scientists, Big the information from the system logs, Data developers, and testers worked for Nortal built a data lake that is capable 18 months, providing a set of solutions of discovering data breaches, customer for Telia’s GDPR compliance. Starting transactions and events where customer with analyzing and mapping the information has been accessed, business processes, they then identified ultimately creating a new, centralized and classified personal information analytical environment and capabilities. and data retention times. Collecting all Nortal went through all the logs in Telia’s CASE STUDY BY NORTAL 3 different environments and identified the report a data breach, should such a thing types of data the company had about happen. In order to do that, a company their customers and how these were must be capable of identifying stored. the leak or misuse of data. With the data lake solution, all the log The work Nortal did for Telia is part of a files are now stored with proper retention wider solution that helps the company times, enabling quick and easy searches detect data leaks and breaches. It is a and analytics throughout different tool that makes life easier for the Data information system datasets. According Protection Officer (DPO) that the GDPR to the GDPR, a company has 72 hours to requires larger companies to hire. The results, through the client's eyes Eva Jakunin worked as Head of Risk created a preparedness to identify Management and Country Security at possible data breaches, and among Telia Estonia during the project. She says other things created a data lake,” Jakunin the big data project Nortal conducted in said. “This project helped Telia grow Telia was extensive, and aimed at solving significantly and the experience cannot different types of business tasks and be underrated. Telia can confirm that classifying different types of data. Nortal is a highly competent partner when it comes to Big Data. Plus the “For example, Nortal identified and project management they offer is classified different sets of personal data, highly professional.” Create data map now! Now, Nortal offers a new, comprehensive tool for data governance: DataRadar. It provides an overview of the all data an organization has and The length of the The volume of the creates a fully fact-based data project data lake created map. Several analysts, data scientists, Thanks to the data lake created, it and big data developers worked on is now easier and quicker to access the project for more than a year. information. 10 BRANCHES 150+ ONGOING PROJECTS PRESENCE IN 20+ COUNTRIES Nortal is building a seamless Nortal's approach to society globally Data Protection Nortal is a multinational strategic change and Nortal’s approach to information security funnels technology company. Combining the unique experience scattered data streams into a unifi ed pool of data. of transforming Estonia into a digital leader and This builds a holistic view of data characteristics and creating change in businesses with a strategic interactions. Such a deep insight prescribes protective approach and data-driven technology, our vision is to measures and facilitates the formation of a functional build a seamless society. data protection policy. Nortal works to build a seamless society that Nortal’s approach to tackling your data security stands on three pillars — enterprise, e-health, and challenges is not limited to the innovative use of e-government. In each of these three areas, Nortal has technology. It also covers change management and helped very infl uential customers achieve strategic country-specifi c legal support. change and build better experiences. Our approach to the GDPR compliance challenge Operating in Europe, the Middle East, Africa, and North delivers cost savings, data consolidation and predictive America, Nortal doesn’t just provide IT services, but analytics. Our reference projects that have already been actual structural reforms, focusing on the underlying deployed are a proof that this will signifi cantly lower impact on the target organization, whether it be your operational expenditures to a fraction of the cost governments, hospitals or private enterprises. of the upcoming EU fi nes. Get in touch with our expert Nortal’s Head of Data Protection has been praised for his ability for see the bigger picture and communicate a vision, while at the same time having the capacity to take big projects through change. With more than ten years of experience in the tech industry, he is passionate about fi nding new ways to take full advantage of the data that organizations collect and store. Artur Assor Nortal’s Head of Data Protection [email protected] Learn more about data protection on Nortal's website: https://nortal.com/business/data-protection/.
Recommended publications
  • Secure Smart Identity for Healthcare TAAVI EINASTE, HEAD of DIGITAL HEALTH
    © Nortal Group 2017 nortal.com Secure smart identity for healthcare TAAVI EINASTE, HEAD OF DIGITAL HEALTH OCTOBER 16TH, 2017. TALLINN 2017 Group Nortal © Health care expenditure varies around the world Canada $5,718 UK $3,598 Netherlands $6,145 China $367 Germany $5,006 US $9,146 Japan $3,966 United Arab Emirates, Saudi Arabia, Mexico $664 Qatar $1,473 India $61 Brazil $1,083 Australia $5,827 2017 Group Nortal © $12 $9,146 Health expenditure per capita (current US$) Health spending has outpaced economic growth Average growth rate of health spending and GDP per capita, 1990-2012 8.0% 7.0% Health spending 6.0% matching GDPgrowth 5.0% 4.0% 3.0% 2.0% 2017 0.0% ITA ISL FIN ISR IRL Group DEU LUX CHE CAN DNK SWE GRC HUN FRA ESP AUT MEX USA BEL AUS JPN NZL NLD NGR GBR SVN CZE PRT EST POL CHL TUR SVK KOR Nortal © GDP growth per capita Health spending growth per capita © Nortal Group And we know is possible we know And for What wehope Paulina had been feeling bad for a long time and opened eHealth inside Apple’s Health app to book an appointment with her healthcare provider. Group Nortal © eHealth’s AI asked Pauliina some questions recommended she meet her family doctor. It sent an appointment request to Dr. Martin, adding the questionnaire results. Group Nortal © Dr. Martin received the request and agreed to meet Paulina. AI saw a conflict in their merged calendars and suggested Paulina met Dr. Miller instead. Group Nortal © Paulina met Dr.
    [Show full text]
  • CS TETRIS 205X266+Bleed3 Copy.Indd
    CASE STUDY HELPING PEOPLE WITH REDUCED WORK ABILITY RETURN TO THE LABOR MARKET ESTONIA FINLAND GERMANY SWEDEN US OMAN UAE LITHUANIA SERBIA EASE OF DOING BUSINESS TETRIS is an information system commissioned by the Estonian Unemployment Insurance Fund for the purpose of performing fair and accurate work ability assessments and granting disability benefits in accordance with legal and procedural requirements. The Work Ability Reform of 2016 obligated the Fund to take over the bulk of work ability assessment and work ability benefit provision from the Social Insurance Board. With over 100,000 potential clients and tight deadlines, the reform’s success depended on optimized business processes and a versatile information system, which Nortal delivered. The Challenge In 2016, Estonia intended to introduce an extensive work ability reform, which would affect more than 100,000 people receiving disability benefits. The reform set out to achieve four major goals: Foster a more positive attitude in society towards Handle all of the people currently receiving 1 people with reduced work ability, which would 2 disability benefits on an individual basis and also have a positive effect on their self-image. determine their actual eligibility. Help people with reduced work ability to return Increase tax revenue and reduce costs on a 3 to the labor market. 4 national level. What made the task even more challenging was the legal obligation to assess an applicant’s work ability within 30 days and pay the benefits by the 10th of each month. Any delays here would impair the quality of life of the applicant, not to mention the related overdue charges the Fund would have to incur.
    [Show full text]
  • Egovernance WP-A4+Bleed3
    nortal.com WHITE PAPER Why build a digital government E-GOVERNANCE Governments globally are facing a huge challenge — exponentially, people are expecting interactions with the state to move from paper to online; citizens are also expecting governments to treat them as valued customers. Not many countries have mastered the transition from paper to a digital, seamless society successfully. Estonia is an exception. Being true digital governance trailblazers, Estonians can help other governments achieve the same. WHY BUILD A DIGITAL GOVERNMENT For a country to succeed, it has to go digital Millennials and Generation Z are taking over. And this does not apply only to younger Constituting half of the world’s population, they generations. People of all age groups are stay in designer hostels when on business trips, increasingly accustomed to shopping with a click, UEQNFVJGPKPGVQƒXGYQTMKPICTTCPIGOGPVCPF ordering a taxi from an app or assuming they constantly search for meaning in their work. should be able to interact with their governments They also love paper notebooks, but not so much online. In Estonia, where people have been able to VJGRCRGTYQTMVJG[PGGFVQƒNNQWVKPQTFGTVQ vote online in national elections since 2005, the communicate with their governments. oldest voters have been more than 100 years old. Glued to their screens, they expect to interact For governments, keeping up with these new with service providers virtually, from wherever expectations is a challenge. It’s a huge change in they are. More and more, people are applying the mindset for governments — how to make life easier same expectations to governments. Younger for people so they’ll be happier citizens and to generations see governments as service providers, also attract talent from other countries to relocate and they believe interaction with their governments there? should be as easy and smooth as buying a pair of headphones online.
    [Show full text]
  • Have a Mobile Phone
    102724 A World Bank Group Flagship Report DIGITAL DIVIDENDS Digital technologies are spreading rapidly, but digital dividends— world development report the broader benefits of faster growth, more jobs, and better services—are not. If more than 40 percent of adults in East Africa Public Disclosure Authorized pay their utility bills using a mobile phone, why can’t others around the world do the same? If 8 million entrepreneurs in China—one-third of them women—can use an e-commerce platform to export goods to 120 countries, why can’t entrepreneurs elsewhere achieve the same global reach? And if India can provide unique digital identifica- tion to 1 billion people in five years, and thereby reduce corruption by billions of dollars, why can’t other countries replicate its success? Indeed, what’s holding back countries from realizing the profound and transformational effects that digital technologies are supposed to deliver? Two main reasons. First, nearly 60 percent of the world’s population are still offline and can’t participate in the digital economy in any meaningful way. Second, and more important, Public Disclosure Authorized the benefits of digital technologies can be offset by growing risks. DIGITAL Startups can disrupt incumbents, but not when vested interests and regulatory uncertainty obstruct competition and the entry of new firms. Employment opportunities may be greater, but not when DIVIDENDS the labor market is polarized. The internet can be a platform for universal empowerment, but not when it becomes a tool for state OVERVIEW control and elite capture. The World Development Report 2016 shows that while the digital revolution has forged ahead, its “analog complements”—the regulations that promote entry and competition, the skills that enable workers to access and then leverage the new economy, and the institutions that are accountable to citizens—have not kept Public Disclosure Authorized pace.
    [Show full text]
  • Start a Business in 2 Minutes
    nortal.com WHITE PAPER Start a business in 2 minutes EASE OF DOING BUSINESS The days when starting a business took months and involved a lot of red tape are over. With the help of strategic thinking and technology, the time to register a company can take far less time than boiling an egg. This white paper shows how this can be done. “Every responsible government has the mission to build and maintain a thriving business climate in order to maximize wealth for society.” Rein Lang, Estonian ex. Minister of Justice The Seamless Society Where government, businesses and individuals meet How to do this? First, by approaching the mission from the investor’s perspective. Investor expects the communication with the government institutions to be transparent, secure and fast. And all this is possible today. Nortal Estonia used to hold the world record for registering a new Nortal helps governments to company in 18 minutes. In 2015, a new record has been set by improve local business climate Oman, where the fastest new company registration was via reforms powered by completed in only 1 minute and 6 seconds. technology. We call them Nordic talent (Nortal) solutions. Both records became possible thanks to Nortal’s expertise in building a seamless e-government. Ease of doing business 03 Setting trends for the world Starting a business Nortal Vision What affects the ease of starting a business: “Every responsible government has the mission to build Investments flow in and and maintain a thriving business climate in order to 1. Number of procedures economic activity speeds up, 2.
    [Show full text]
  • Dataradar: Data Governance Has Never Been Easier
    nortal.com CASE STUDY DataRadar: data governance has never been easier DATA PROTECTION A comprehensive new tool for data governance, DataRadar provides an overview of the data an organization has and creates a fully fact-based data map. DEEPSCAN: DATA GOVERNANCE HAS NEVER BEEN EASIER Data is the new oil. How wealthy are you? DataRadar helps you find out. Are you ready for the GDPR? The EU’s new General Compliance is not optional, so why not make it Data Protection Regulation applies to all businesses work for you? DataRadar lets you take control whose customers are EU residents. The GDPR is an of your data, turning compliance costs into an opportunity to understand the value of the data your investment that generates an actual return. Treat organization collects and stores. DataRadar is a the GDPR as an opportunity to use data for smarter data governance tool that converts your compliance sales and marketing, creating seamless customer costs into an investment that can deliver a real experiences. return. We believe GDPR will not be the end of the data- driven customer journey. Instead, it is a great opportunity to turn your compliance costs into investments in new business models. Priit Alamäe, Nortal's CEO Benefits Simpler business Better data quality Data is protected processes Superior data quality facilitates Quality data gives your company Proper data governance mitigates better decision making and a competitive advantage. A full data- and privacy-related risks relat- simplifies business processes – overview of your data improves its ed to data breaches and the danger enabling insights into customers’ quality and reliability across your of public shaming for customer natural data patterns as well as entire organization.
    [Show full text]
  • Open Government Data and Value Creation
    OPEN GOVERNMENT DATA AND VALUE CREATION THE CASE OF NORTAL A/S ROSKILDE UNIVERSITY Business Studies, Internship Report Spring 2017 SUPERVISON Kirsten Mogensen AUTHOR Ninni Gustavsen / 49883 Illustration: toolinux.com Logo: Nortal.com ABSTRACT This research project takes the starting point in the Estonian ICT market, with a particular focus on Open Government Data and value creation in private businesses. With Nortal as a case, the problem is explored through a thematic analysis of an interview with Oleg Schvaikovsky, Member of Board at Nortal. The findings are that value creation from OGD from Nortal’s point of view happens due to the use of particularly transparency and efficiency mechanisms with a focus on the entire ecosystem and not just implementing the IT. In conclusion, Nortal focuses a lot on value creation from Open Government Data by considering the surroundings and the ecosystem in which the technology will be implemented. Nortal makes use of both transparency mechanisms and efficiency mechanisms to create a seamless society. The findings of this project have contributed knowledge of value creation from Open Government Data in private businesses to a small academic field in development. Keywords: Open Government Data, Nortal, private business, Estonia, value creation, mechanisms 1 TABLE OF CONTENTS 1.0 INTRODUCTION 4 1.2 PROBLEM STATEMENT 5 2.0 CONTEXTUALIZATION 6 2.1 DATA AND OPEN DATA 6 2.2 OGD AND EUROPE 7 2.3 OGD AND ESTONIA 8 2.4 Nortal AS 10 3.0 METHODOLOGY 11 3.1 ANALYTICAL DESIGN 11 3.2 LEVEL ONE: GATHERING EMPIRICAL
    [Show full text]
  • Changing Economy Changing Society
    CHANGING ECONOMY CHANGING SOCIETY IT INDUSTRY IN POST-SOVIET COUNTRIES ANATOLY MOTKIN CHANGING ECONOMY CHANGING SOCIETY IT INDUSTRY IN POST-SOVIET COUNTRIES ANATOLY MOTKIN ABOUT STRATEGEAST StrategEast is a strategic center whose goal is to create closer working ties between political and business leaders in the former Soviet countries outside of Russia and their peers in the United States and Western Europe. StrategEast believes nations from the former Soviet Union share a heritage that has resulted in common obstacles to the formation of stable, efficient, market-oriented democracies. We hope to appeal to political, business and, academic leaders in post-Soviet countries and the West, helping them better understand one another, communicate across borders, and collaborate to support real change. Our work is focused on the 14 former Soviet states outside of Russia. This post-Soviet, non-Russia (PSNR) region includes: Armenia, Azerbaijan, Belarus, Estonia, Georgia, Kazakhstan, Kyrgyzstan, Latvia, Lithuania, Moldova, Tajikistan, Turkmenistan, Ukraine, and Uzbekistan. StrategEast focuses on six key issue areas that are especially influential to the transition to Western political and economic systems: fighting corruption, implementing a Western code of business conduct within a post-Soviet business environment, modernizing infrastructure; promoting independent press and civil society, energy transparency, LEARN MORE AT OUR WEBSITE: and leadership impact. www.StrategEast.org StrategEast is a registered 501c3 based in the United States. StrategEast focused on the Former Soviet Union outside PSNR© – of the Russian Federation. StrategEast sees Post-Soviet Non- Russian (PSNR©) nations as coalescing around and facing Post-Soviet common geopolitical challenges. We are strongly convinced Non-Russian that the rapprochement of the post-Soviet elites with American and West European government institutions and civil society serves the interests of global security and could gradually lead to the Westernization of the entire region.
    [Show full text]
  • Lithuania: Better Care Through National Health Record
    CASE STUDY LITHUANIA: BETTER CARE THROUGH NATIONAL HEALTH RECORD ESTONIA FINLAND GERMANY US OMAN UAE LITHUANIA SERBIA DIGITAL HEALTHCARE Lithuania’s health records system was in desperate need of modernization. Patient files were kept on paper and hospitals had their own procedures for keeping records. Thanks to Nortal, Lithuania now has a fully functional national health record that saves time and a range of other resources. Smarter healthcare through digitization Gabija was visiting the capital when her asthma took a frightening turn for the worse. Despite being far from her home clinic, doctors were able to instantly access Gabija’s medical history and treat her immediately. A few years ago, the records retrieval would have taken days. Luckily, Nortal has created a centralized, national health record system (NHR) for Lithuania (ESPBI IS), which is fundamentally transforming the nation’s healthcare landscape. SERVICE SOLUTION DESIGN OFFER STRATEGY ADOPTION INTRODUCTING USER MANAGEMENT NHR TO DOCTORS TRAINING CHANGE SOLUTION ARCHITECTURE, DEVELOPMENT & SUPPORT TECHNOLOGY Nortal’s steps in the NHR project LITHUANIA: BETTER CARE THROUGH NATIONAL HEALTH RECORD The Challenge Lithuania’s health records system was in desperate medical files, or their children’s. The task was at best need of modernization. Not only were patient files burdensome, if not outright impossible. primarly kept on paper, each hospital maintained them separately using its own record-keeping procedures. The outdated setup was also creating problems at the highest levels. In the absence of digitization, state Predictably, such a disjointed system led to multiple policymakers had no way of performing analytics that information bottlenecks. Doctors from one institution would give them an accurate picture of the nation’s had to wait several days to retrieve records from health needs, nor did they have any hope of adding another.
    [Show full text]
  • Countryname Company Jobtitle Austria AUVA Dr. Belgium AAL
    CountryName Company JobTitle Austria AUVA Dr. Belgium AAL Association Communication Officer Belgium AAL Programme Communication Officer Belgium AAL Programme Director Belgium AGE Platform Europe Secretary General Belgium Agfa HealthCare N.V. President EMEA Belgium Application Developers Allianc policy manager, Europe Belgium Carestream Health Business Development Manager Belgium DIGITALEUROPE Policy Director Belgium EESC Dr. Belgium EHTEL Secretary General Belgium EHTEL eHealth expert Belgium ESIP- Health Insurance Health Policy Advisor Belgium European Commission Head of Unit Belgium Eurorec Vice President Research Belgium EuroRec Institute Medical Director Belgium HL7 Foundation Secretary General Belgium iMinds Program manager Belgium International Diabetes Federat CEO Belgium Medinternals Enterprise Architect Belgium RAMIT VZW Director Belgium State University Ghent Head of Dept of Health Info Belgium Université libre de Bruxelles Project leader Belgium UZ Brussel Application Manager CWS Bulgaria Security Solutions Institute CEO Bulgaria Security Solutions Institute Business Development Associate Croatia APIS IT d.o.o. Business Analyst Croatia APIS IT d.o.o. Business Architect Croatia Croatian Health Insurance Fund Head of Division Croatia Croatian Health Insurance Fund Deputy Director for ICT Croatia Croatian Health Insurance Fund Director Cyprus University of Cyprus Professor Czech Republic UK 1. LF docent Czech Republic VZP Cr CIO VZP CR Denmark IHTSDO Customer Relations Lead EMEA Denmark IHTSDO Chairman Denmark Mental Health Southern
    [Show full text]
  • Estonia's Digital Transformation: Mission Mystique and the Hiding Hand
    Institute for Innovation and Public Purpose Estonia’s digital transformation: Mission mystique and the hiding hand Rainer Kattel Professor of Innovation and Public Governance Deputy Director, UCL Institute for Innovation and Public Purpose Ines Mergel Professor of Public Administration, University of Konstanz, Department of Politics and Administration Working Paper IIPP WP 2018-09 September 2018 About the Institute for Innovation and Public Purpose The UCL Institute for Innovation and Public Purpose (IIPP) aims to develop a new framework for creating, nurturing and evaluating public value in order to achieve economic growth that is more innovation-led, inclusive and sustainable. We intend this framework to inform the debate about the direction of economic growth and the use of mission-oriented policies to confront social and technological problems. Our work will feed into innovation and industrial policy, financial reform, institutional change, and sustainable development. A key pillar of IIPP's research is its understanding of markets as outcomes of the interactions between different actors. In this context, public policy should not be seen as simply fixing market failures but also as actively shaping and co-creating markets. Re-focusing and designing public organisations around mission-led, public purpose aims will help tackle the grand challenges facing the 21st century. IIPP is housed in The Bartlett, a leading Global Faculty of the Built Environment at UCL, with its radical thinking about space, design and sustainability. Suggested citation Kattel, R. and Mergel, I. (2018). Estonia’s digital transformation: Mission mystique and the hiding hand. UCL Institute for Innovation and Public Purpose Working Paper Series (IIPP WP 2018-09).
    [Show full text]
  • Attendee List As of October 10, 2017
    2017 European Conference 18-20 October 2017 Stockholm, Sweden Attendee List as of October 10, 2017 First Name Last Name Company/Organization City Country Belén Arribas Sánchez Miliners Abogados y Aesores Tributarios Barcelona Spain Epp Aasaru Triogames OÜ Tallinn Estonia Allan Bjerg Adeler NNIT A/S Soeborg Denmark Tomas Akesson Storebrand & SPP Business Services AB Stockholm Sweden Mikaela Alderhorn Hamilton Advokatbyrå Stockholm Sweden Malin Allard Advokatfirman Cederquist KB Stockholm Sweden Manuel Giorgio Alonso Porri Jausas Legal y Tributario Barcelona Spain PhD Student in Law, Science and Rogers Alunge Technology Buea Cameroon Axel Anderl Dorda Rechtsanwälte Vienna Austria Steven Andersen ICDR Los Angeles, CA United States Jörgen Axelsson Setterwalls Advokatbyrå AB Stockholm Sweden Stefan Backman Tele2 Stockholm Sweden Sharda Balaji NovoJuris Legal Bangalore India Institute of Legislation of the Russian Maria Baranchikova Federation Moscow Russia Susan Barty CMS London London United Kingdom John Beardwood Fasken Martineau DuMoulin LLP Toronto Canada Emilio Beccar Varela Estudio Beccar Varela Buenos Aires Argentina Thor Beke Advokatfirmaet Berngaard/Sandbek AS Oslo Norway Marco Bellezza Portolano Cavallo Rome Italy Henrik Bengtsson Advokatfirman Delphi Stockholm Sweden Nicole Beranek Zanon de la cruz beranek Attorneys-at-Law Ltd. Zürich Switzerland Erik Bergenstråhle Advokatfirman Lindahl Stockholm Sweden Anders Bergsten Mannheimer Swartling Stockholm Sweden Henrik Bergstrom Osborne Clark Advokatfirma AB Stockholm Sweden Claire Bernier
    [Show full text]