Automating GDPR Processes

In Partnership with Sopra Steria

Industry:
Retail

Company Size:
25,000 employees

Solution:
Privacy Hub

About the Company

REMA 1000 is a multinational no-frills supermarket chain, headquartered in Norway. They were determined to overcome their GDPR business challenges but were unsure of where to start. Wrangu’s Privacy Hub has been used to solve real business problems and create value. Sopra Steria – a Wrangu certified partner – worked with their client REMA 1000 to solve their GDPR Data Subject Rights Request challenge. By combining Privacy Hub and their online app, REMA were able to realise significant benefits.

The Challenge

REMA1000 required a secure way to collect and deliver the data to the end-user. They struggled with the massive amount of manual work required – a whopping 8 hours per Subject Access Request – including internal and external hours.

They were aware that GDPR compliance is not a one-time fix, they needed a single source of truth for information regarding their processing of data, handling DPIAs.

They needed something more robust than an excel sheet.

Our Approach

We stepped in to automate GDPR processes for REMA 1000, namely Subject Access Request (also known as Data Subject Rights Request) in order to deliver the data in a secure and timely way.

As we implemented Privacy Hub, we saved REMA 1000 8 hours per Subject Access Request in turn recovering the cost of the project within the first quarter ($250k USD per month), thus ensuring the customers’ trust by granting them complete insight into their data, including every single purchase, within minutes.

The Results

8

That’s the number of hours we saved per subject access request for REMA 1000,  within the first quarter of implementing Privacy Hub.

$250k

That’s the cost that was recovered within the first quarter for REMA 1000, as a result of implementing Privacy Hub.