Operationalizing compliance with OneTrust

After researching and evaluating several data protection management solutions, Cemig opted for the OneTrust platform to operationalize its privacy and data governance program.

“OneTrust’s solution was the best fit to the project we outlined for our privacy program and it completely meets the mapping of all stages of the processes that we need to implement,” said Douglas.

Cemig implemented OneTrust’s DSAR module to create a standardized and automated way to receive consumer requests regarding personal data and manage them in a centralized system. The cookie compliance module was also implemented, with the creation of a geo–specific cookie banner on the company’s 3 portals, a measure that gives consumers control over cookie preferences and marketing consent.

“With the OneTrust solution it is possible to automate the DSAR process, meeting the deadline established by law, in a more transparent and reliable way for consumers and with a reduction in costs for the company,” said Douglas.

The results already permeate the entire company. One of the most relevant points for Douglas is Privacy by Design. With the structuring of the privacy program at Cemig, all products and activities carried out by the company now prioritize the privacy of consumers and employees.

“With the OneTrust platform it is easy to grant and control access, view reports and statistics, perform analyzes, and generate insights,” said Douglas.

Cemig is already implementing other OneTrust modules, including: Assessment Automation, Vendor Risk Management, Incident Response, Policy and Notice Management, Robotic Automation for DSAR, as well as Awareness Training.

With Robotic Automation for DSAR, fulfilling orders from data subjects will be even faster and safer. Cemig will be able to easily discover all systems and data sources within the company. It will then be possible to categorize, classify and connect the data back to an individual identity map to instantly process access and deletion requests.

Douglas stresses that privacy should not be limited to just one area within the company. Training the entire workforce, around 25 thousand employees, including direct and indirect employees, is essential for building a culture that prioritizes privacy. This is another step that will be supported by OneTrust with the Awareness Training modules.

“We are looking forward to training all employees, automating processes, reviewing all mapping and the data life cycle, as well as managing risks using the OneTrust platform,” said Douglas.