Privacy Program at a B2B Telecom Major
The organization is a Telecom major present in 190+ countries and serves over 7,000 customers globally that represent over 300 of the Fortune 500. Historically, discrete steps around Data Privacy were taken to comply with GDPR, however a coherent holistic approach was missing.
The organization was keen to take its Privacy Initiative to the next level and build a formal Privacy Program in a structured manner given its exposure to multiple geographies as well as keeping in mind the upcoming India Privacy Bill.
Arrka conducted a pilot assessment for two areas, one for a Commercial Product, and secondly for Customer Data. The Assessment was conducted against the ‘LawAgnostic’ Arrka Privacy Implementation Framework (APIF). This was done to ensure scalability and consistency. The 2-step Assessment included: Personal Data Attribute Mapping (PDAM) and Gap Assessment based on the APIF and mapped to applicable Privacy Laws. The Assessment identified 20+ key gaps at the Product & Organization Level. These gaps informed the design and implementation planning of a Privacy Framework for the Assessed Products