GVC Group

GVC places its bet on OneTrust privacy management software

GVC places its bet on OneTrust privacy management
High stakes privacy compliance
Backing with a suite of OneTrust modules
Odds on for success with OneTrust

GVC Holdings is one of the largest groups of sports betting and gaming in the world, operating across 20 jurisdictions with more than 24,000 employees across five continents. They operate some of the industry’s most popular sports betting, casino, poker, and bingo platforms, including Ladbrokes, Coral, Bwin, Eurobet, PartyPoker, PartyCasino, and Foxy Bingo.

At GVC, privacy is about going beyond regulatory compliance and is about respecting and protecting their customers, a value that is especially key in the gambling industry. Implementing an efficient privacy program that brings together the multiple departments and respects user privacy is a top priority for GVC.

High stakes privacy compliance

The GDPR and more than 120 other regulations provide the framework for GVC’s global operations. Chief Privacy and Group Data Protection Officer at GVC, Andreas Klug, knew that in order to manage their large-scale operations and cross-team collaboration they would need to implement a solution that embedded privacy technology into the company.

"As a technology-based company, data is the new oil, it gives you the power to understand and drive your business. Effectively and appropriately leveraging this information can’t be done with spreadsheets. The processes need to be built into centralized technology."

Andreas Klug, Chief Privacy and Data Protection Officer

“It is very difficult to comply with 120 plus regulations individually at any given time, so it is important to create a good core set of rules and frameworks that all areas of the organization can follow, allowing the technology and other functions to align,” said Andreas.

Data sits at the heart of GVC’s operations, so properly managing this data is the top priority. GVC knows privacy is not just isolated to the privacy team. They needed a centralized technology solution to integrate privacy across departments, implement Privacy by Design, and ensure that privacy is part of the conversation from the beginning of any project.

“As a technology-based company, data is the new oil, it gives you the power to understand and drive your business. Effectively and appropriately leveraging this information can’t be done with spreadsheets. The processes need to be built into centralized technology,” said Andreas.

"OneTrust is a beacon of light at the moment; privacy technology hasn’t been at play for very long and OneTrust is certainly a pioneer. There aren’t many genuine competitors that can offer this complete solution."

Andreas Klug, Chief Privacy and Data Protection Officer

Backing the right horse with a suite of OneTrust modules

GVC selected OneTrust’s Assessment Automation, Data Mapping, Vendor Risk Management, DataGuidance and Cookie management modules to centralize their privacy program.

“Assessment Automation is our go-to for everything, it’s how we create different templates. We use it for our DPIAs, data mapping assessments, legitimate interest assessments, threshold assessments, supplier questionnaires, and more. It’s so helpful to be able to tailor these assessments to our bespoke needs,” said Becky.

OneTrust’s Assessment Automation module has been a crucial component of GVC’s program, adding the visibility that is vital to cross-team collaboration. OneTrust’s Data Mapping module ensures that the information gathered from the assessments is clear and accessible. This improves efficiency and reduces the time taken to produce reports, which helps GVC demonstrate their accountability, particularly when it comes to their Article 30 Record of Processing Activities responsibilities.

OneTrust’s vendor risk management is quickly becoming GVC’s go-to contract management system, enabling the vital collaboration between the privacy team and the information security team. The relevant teams can easily search for a vendor and review the associated information, making the audit process much smoother.

“The access controls and customized views that OneTrust allows within the Vendor Risk Management module are incredibly useful, especially when it comes to auditors. We can allow them to view the data but prevent any data from being extracted,” said Becky.

Andreas finds the OneTrust DataGuidance module a great resource for channeling and streamlining his research. Rather than having to search through multiple resources, the DataGuidance platform provides a reliable and up to date source for all the latest regulatory developments globally. The platform also acts as a useful repository for Andreas’ research, as reports and searches can be saved to be revisited at a later date.

"Rather than trying to be everywhere at once, we built frameworks and committees that allow us to be involved in data-driven projects right from the start. OneTrust’s centralized tool is key in achieving this."

Becky Tarrant, Data Privacy Manager

Odds on for success with OneTrust

GVC bet on OneTrust to be its centralized platform for privacy management. The company is continuing to turn to OneTrust for additional compliance modules and is currently implementing OneTrust for cookie compliance.

OneTrust has had a positive impact on GVC’s culture of privacy. Today privacy is top of mind and accessible, thanks to OneTrust. The privacy team doesn’t just consult with different stakeholders, they work together and proactively operationalize their privacy program, also allowing for the collaboration that GVC knew would be key to a successful compliance program.

GVC Group

GVC places its bet on OneTrust privacy management software

Table of contents

High stakes privacy compliance

"As a technology-based company, data is the new oil, it gives you the power to understand and drive your business. Effectively and appropriately leveraging this information can’t be done with spreadsheets. The processes need to be built into centralized technology."

"OneTrust is a beacon of light at the moment; privacy technology hasn’t been at play for very long and OneTrust is certainly a pioneer. There aren’t many genuine competitors that can offer this complete solution."

Backing the right horse with a suite of OneTrust modules

"Rather than trying to be everywhere at once, we built frameworks and committees that allow us to be involved in data-driven projects right from the start. OneTrust’s centralized tool is key in achieving this."

Odds on for success with OneTrust

You may also like

AI Governance

Governing the AI lifecycle

In this webinar, we’ll look at the AI development lifecycle and key considerations for governing each phase.

June 04, 2024

AI Governance

Embedding trust by design across the AI lifecycle

In this webinar, we’ll break down the AI development lifecycle and the key considerations for teams innovating with AI and ML technologies.

May 07, 2024

AI Governance

Data privacy in the age of AI

In this webinar, we’ll discuss the evolution of privacy and data protection for AI technologies.

April 17, 2024

AI Governance

AI regulation in the US

In this webinar, we’ll discuss key updates and drivers for AI policy in the US; examining actions being taken by the White House, FTC, NIST, and the individual states.

March 05, 2024

AI Governance

The EU AI Act

In this webinar, we’ll break down the four levels of AI risk under the AI Act, discuss legal requirements for deployers and providers of AI systems, and so much more.

February 06, 2024

AI Governance

Getting started with AI Governance

In this webinar we’ll look at the AI Governance landscape, key trends and challenges, and preview topics we’ll dive into throughout this masterclass.

January 16, 2024

AI Governance

Building your AI inventory: Strategies for evolving privacy and risk management programs

In this webinar, we’ll talk about setting up an AI registry, assessing AI systems and their components for risk, and unpack strategies to avoid the pitfalls of repurposing records of processing to manage AI systems and address their unique risks.

December 19, 2023

Responsible AI

Preparing for the EU AI Act

Join Sidley and OneTrust DataGuidance for a reactionary webinar on the EU AI Act.

December 14, 2023

Privacy Management

December Privacy & Data Governance Cloud demo webinar

See how OneTrust's Privacy & Data Governance Cloud operationalizes regulatory compliance and helps ensure privacy and responsible data use.

December 13, 2023

Consent & Preferences

The consent and preferences roadmap

How can your organization get started with consent and preferences? What are the first steps to take? Download our infographic to learn more.

December 11, 2023

Trust Intelligence

Trending Toward Trust in 2024: Measurement, management, and maturity

Trending Toward Trust in 2024 highlights some of the biggest industry drivers for organizations on their trust transformation journeys. Take a glimpse at what’s in store in 2024 with this infographic.

December 08, 2023

Privacy Management

Automating fulfillment of subject rights requests in the US

Learn how Privacy Rights Automation helps to fully automate privacy rights requests.

December 06, 2023

Privacy Management

OneTrust announces partnership with Europrivacy

Learn how OneTrust and Europrivacy's partnership can help your organization achieve GDPR compliance and build trust with your customers.

December 06, 2023

Privacy Management

Live Demo: How to holistically manage data transfers and data sharing requirements

Live demo of the OneTrust Privacy Cloud, exploring how to manage Data Transfers, perform TIAs, and enforce consumer opt-out of the sale/share of personal data.

December 05, 2023

Consent & Preferences

Marketing Panel: Balance privacy and personalization with first-party data strategies

Join this on-demand session to learn how you can leverage first-party data strategies to achieve both privacy and personalization in your marketing efforts.

December 04, 2023

AI Governance

Revisiting IAPP DPC: Top trends from IAPP's privacy conference in Brussels

Join OneTrust and KPMG webinar to learn more about the top trends from this year’s IAPP Europe DPC.

November 28, 2023

Consent & Preferences

The latest on consent-driven advertising: TCF 2.2, GPP, GCM and beyond

Unlock cutting-edge advertising trends: TCF 2.2, GPP, GCM and more! Join to master consent strategies in 2024 and beyond.

November 27, 2023

AI Governance

Navigating the draft EU AI Act