Problem
ABB needed its applications and internal workforce processes to comply with GDPR across 17 countries and 40 to 50 applications. The work ran from June to August 2019.
Approach
- Read and parsed the full regulation to work out what it required of ABB’s applications and processes
- Worked with the country leads in all 17 countries to align their applications and internal workforce processes
- Listed and tagged every field across the applications, and required a process to review and update those fields annually
- Implemented a request process for EU citizens to request their information or its removal, covering both departing employees and client users of ABB systems
- Designed removal so business-critical information was retained
Outcome
- Each department and country lead went through the request process in final testing
- The request process went live