nortal.com CASE STUDY Telia's journey to GDPR compliance DATA PROTECTION The road to GDPR compliance is long and complicated. With the help of Nortal, Telia has gone through several steps to assure its customers their data is well protected. TELIA BECOMES GDPR COMPLIANT Telia's cornerstones of GDPR To become compliant with the European Union's Telia is not alone — GDPR will make life significantly new General Data Protection Regulation (GDPR), more complicated for all the companies that process Telia Estonia, a branch of a major telecom company any kind of personal data on the residents of the in the Nordics, had to undergo changes in its union. GDPR makes people owners of their personal business processes, organizational practices and IT data, giving them the right to obtain an overview of infrastructure. Nortal helped Telia through several what kinds of data have been collected and how stages of that complex and lengthy journey. these have been processed. The Challenge On its road to GDPR compliance, Telia log files. The problem was that all these Risks of GDPR Estonia faced several challenges. GDPR log files were scattered over different gives customers the right to demand servers, making it very time consuming GDPR puts companies that deal with vast quantities information on what kinds of data to find specific events in the logs and of personal information at companies have collected about them, the staff had to go through the systems considerable risk. Fines order the companies to delete the data, manually. for non-compliance can be or set restrictions on which data can be up to 20 million euros or 4% of a company’s global processed. Recognizing the seriousness of the annual turnover, whichever challenge early on, Telia set out to find is bigger. An even more As a major telecom company, Telia has a partner who could automate this serious problem, however, several hundred different information process and more broadly bring all data is the possible negative reaction from customers if systems, many containing personal and business practices in line with the it becomes public that the information, and all of these produce regulation. company has not protected its data well enough or even worse, has misused it. 2844,56 The Solution 6589,56 Nortal analysts, data scientists, Big the information from the system logs, Data developers, and testers worked for Nortal built a data lake that is capable 18 months, providing a set of solutions of discovering data breaches, customer for Telia’s GDPR compliance. Starting transactions and events where customer with analyzing and mapping the information has been accessed, business processes, they then identified ultimately creating a new, centralized and classified personal information analytical environment and capabilities. and data retention times. Collecting all Nortal went through all the logs in Telia’s CASE STUDY BY NORTAL 3 different environments and identified the report a data breach, should such a thing types of data the company had about happen. In order to do that, a company their customers and how these were must be capable of identifying stored. the leak or misuse of data. With the data lake solution, all the log The work Nortal did for Telia is part of a files are now stored with proper retention wider solution that helps the company times, enabling quick and easy searches detect data leaks and breaches. It is a and analytics throughout different tool that makes life easier for the Data information system datasets. According Protection Officer (DPO) that the GDPR to the GDPR, a company has 72 hours to requires larger companies to hire. The results, through the client's eyes Eva Jakunin worked as Head of Risk created a preparedness to identify Management and Country Security at possible data breaches, and among Telia Estonia during the project. She says other things created a data lake,” Jakunin the big data project Nortal conducted in said. “This project helped Telia grow Telia was extensive, and aimed at solving significantly and the experience cannot different types of business tasks and be underrated. Telia can confirm that classifying different types of data. Nortal is a highly competent partner when it comes to Big Data. Plus the “For example, Nortal identified and project management they offer is classified different sets of personal data, highly professional.” Create data map now! Now, Nortal offers a new, comprehensive tool for data governance: DataRadar. It provides an overview of the all data an organization has and The length of the The volume of the creates a fully fact-based data project data lake created map. Several analysts, data scientists, Thanks to the data lake created, it and big data developers worked on is now easier and quicker to access the project for more than a year. information. 10 BRANCHES 150+ ONGOING PROJECTS PRESENCE IN 20+ COUNTRIES Nortal is building a seamless Nortal's approach to society globally Data Protection Nortal is a multinational strategic change and Nortal’s approach to information security funnels technology company. Combining the unique experience scattered data streams into a unifi ed pool of data. of transforming Estonia into a digital leader and This builds a holistic view of data characteristics and creating change in businesses with a strategic interactions. Such a deep insight prescribes protective approach and data-driven technology, our vision is to measures and facilitates the formation of a functional build a seamless society. data protection policy. Nortal works to build a seamless society that Nortal’s approach to tackling your data security stands on three pillars — enterprise, e-health, and challenges is not limited to the innovative use of e-government. In each of these three areas, Nortal has technology. It also covers change management and helped very infl uential customers achieve strategic country-specifi c legal support. change and build better experiences. Our approach to the GDPR compliance challenge Operating in Europe, the Middle East, Africa, and North delivers cost savings, data consolidation and predictive America, Nortal doesn’t just provide IT services, but analytics. Our reference projects that have already been actual structural reforms, focusing on the underlying deployed are a proof that this will signifi cantly lower impact on the target organization, whether it be your operational expenditures to a fraction of the cost governments, hospitals or private enterprises. of the upcoming EU fi nes. Get in touch with our expert Nortal’s Head of Data Protection has been praised for his ability for see the bigger picture and communicate a vision, while at the same time having the capacity to take big projects through change. With more than ten years of experience in the tech industry, he is passionate about fi nding new ways to take full advantage of the data that organizations collect and store. Artur Assor Nortal’s Head of Data Protection [email protected] Learn more about data protection on Nortal's website: https://nortal.com/business/data-protection/.