Viaplay

How Viaplay enabled adaptability, automation, and connectivity with OneTrust

Company overview
Challenge
Solution
Viaplay’s use case and outcomes with OneTrust
About the company

Overview

Industry: Entertainment

Region: Europe, Middle East, and Africa

Company size: Enterprise

About the company

Viaplay Group AB is a Swedish media and entertainment company headquartered in Stockholm. The company operates the video streaming services Viaplay, advertising-funded TV and radio channels in every Nordic country and the Netherlands. Viaplay Group has its Group Compliance Department that houses both the Privacy and Compliance teams.

Company overview

As a media organization, Viaplay operates in a landscape where privacy and media regulations intersect in complex ways, where they need to balance regulatory compliance with freedom of expression considerations. Beyond complying with data protection laws, Viaplay also needs to align with advertising standards and audience targeting rules. Consent plays a critical role—not just for privacy compliance, but also for maintaining the viability of our advertising model. Managing consent across multiple channels and jurisdictions, while ensuring it aligns with both user expectations and business objectives, remains a constant challenge. Additionally, Viaplay must balance transparency and user experience with regulatory obligations, particularly in dynamic digital environments.

Challenge

Viaplay was looking for a tool that could offer greater visibility and control from a regulatory and operational lens. They wanted a centralized platform that could enable process efficiencies and time savings, in order to reallocate time to more value-added tasks.

Solution

Viaplay selected OneTrust as a solution provider to meet their needs. To start, they onboarded OneTrust’s Privacy Automation Suite (Assessment Automation, Data Mapping, DataGuidance), Consent Management (CMP), and Third-Party Management (Third-Party Risk management, Third-Party Risk Exchange). They later added Third-Party Due Diligence in December 2023 and DSR Automation in December 2024 to their growing suite of OneTrust solutions.

Viaplay’s use case and outcomes with OneTrust

“Using OneTrust as our unified platform has simplified internal alignment by creating a single source of truth for our privacy and compliance risk-related activities. This shared visibility has improved coordination, reduced misunderstandings, and made it easier to track responsibilities and progress.”

-Nenad G., Head of Group Compliance & Group DPO, Viaplay

Tell us about Viaplay’s specific use cases

We use OneTrust primarily to manage our data mapping, consent and third-party risk processes, as well as to streamline data subject rights requests. The platform supports millions of consent records across multiple channels—including web, mobile apps, and connected TV—ensuring we maintain a consistent, compliant approach regardless of the user touchpoint. We've also rolled out standardized questionnaires and assessments for vendor onboarding and privacy impact evaluations, which are used across all functions at the organization.

What have been the key benefits of bringing together Privacy, Compliance, Consent and Risk within the same software solution?

Key benefits are adaptability, automation, connectivity of the tool to support our regulatory, risk, and compliance needs in one platform.

The advantage of bringing several processes into a single platform has given us better visibility and control across our regulatory and operational landscape. It has reduced duplication of effort and made it easier to identify interdependencies between obligations and risks. The adaptability of the platform allows us to respond more quickly to changing regulatory requirements, while built-in automation has helped standardize tasks that were once highly manual. We’ve experienced a 70% decrease in the amount of time spent responding to data deletion requests since we automated the deletion tasks in the different systems where data resides.

Centralizing these processes also supports more informed decision-making and enables us to demonstrate accountability more efficiently.

How have you simplified your internal alignment and visibility across different departments?

Using a unified platform has simplified internal alignment by creating a single source of truth for our privacy and compliance risk-related activities. It has reduced fragmentation by allowing departments to work from the same data and follow consistent workflows. This shared visibility has improved coordination, reduced misunderstandings, and made it easier to track responsibilities and progress. As a result, issues are identified and resolved faster, and cross-functional collaboration has become more structured and efficient.

What impact has OneTrust’s solutions had within your organization and the way you do business?

OneTrust’s solutions have helped us streamline key compliance and privacy workflows, reducing manual tasks and improving consistency across teams. By centralizing processes—such as data mapping, third-party risk assessments, and consent management—we’ve been able to foster better collaboration between several functions. This has not only improved our operational efficiency but also strengthened our ability to respond to regulatory requirements in a timely and coordinated manner.

How are you measuring success internally? 

We measure success by looking at both operational efficiencies and risk reduction outcomes. For example, we expect to significantly cut down the time and resources needed to respond to Data Subject Access Requests (DSARs). We're also tracking improvements in the consistency of third-party risk reviews. Looking ahead, one of our key goals is to further reduce time spent on risk flagging and reporting by automating more of our compliance monitoring. This is expected to generate additional savings and free up our teams to focus on higher-value activities.

What’s next in your privacy, risk and compliance management journey?

Our next focus is on enhancing the vendor onboarding and screening process by making it more user-friendly and automated. We're aiming to streamline due diligence with smarter workflows, automated risk flagging, and clearer reporting to reduce bottlenecks and improve decision-making. In parallel, we're working towards fully operationalizing DSR automation to further reduce manual effort and response times. These steps, in partnership with OneTrust, will help us scale our privacy and compliance operations more efficiently while maintaining high standards of oversight and accountability.

“Leveraging OneTrust, we have been able to identify and resolve issues faster, and cross-functional collaboration has become more structured and efficient.”

-Evelina Johansson, Compliance Officer, Viaplay

Viaplay

How Viaplay enabled adaptability, automation, and connectivity with OneTrust

Table of contents

Overview

About the company

Company overview

Challenge

Solution

Viaplay’s use case and outcomes with OneTrust

Tell us about Viaplay’s specific use cases

What have been the key benefits of bringing together Privacy, Compliance, Consent and Risk within the same software solution?

How have you simplified your internal alignment and visibility across different departments?

What impact has OneTrust’s solutions had within your organization and the way you do business?

How are you measuring success internally?

What’s next in your privacy, risk and compliance management journey?

You may also like

Technology Risk & Compliance

Smarter TPRM in action: Using AI to drive efficiency and better risk outcomes

See how AI‑enabled TPRM transforms traditional vendor risk programs in this live demo, showcasing faster assessments, reduced manual effort, clearer risk insights, and smarter prioritization across the third‑party lifecycle to build a more scalable, outcome‑driven TPRM program.

March 25, 2026

Technology Risk & Compliance

From regulation to resilience: Practical ways to operationalise NIS2

March 18, 2026

Technology Risk & Compliance

2025 regulatory round-up: Navigating the evolving compliance landscape

In this webinar, our regulatory intelligence experts break down the most important updates across 60+ global frameworks and help your teams move from research to action with practical, operational guidance.

January 14, 2026

Technology Risk & Compliance

The strategic guide to third-party risk management

FLLR and OneTrust guide outlines five TPRM principles to manage third-party risk, avoid pitfalls, and build a scalable program.

January 09, 2026

Technology Risk & Compliance

A programmatic guide to 60+ complex frameworks

Managing compliance is a constant challenge and can present an undue burden on organizations as new regulations, standards, and frameworks are introduced and updated globally and across geographies and industries.

January 05, 2026

Third-Party Risk

Integrated risk insights power smarter decisions

Modern organizations are swimming in data. Every business function, from sales and marketing to IT and security, generates valuable insights. Yet these datasets are often siloed, duplicated, or disconnected.

December 22, 2025

Technology Risk & Compliance

Connecting risk insights enable smarter business decisions

What happens when datasets across every business function in an organization are siloed or disconnected? The risk and compliance teams struggle to see the whole picture.

December 17, 2025

Responsible AI

Future of Third-Party Risk Management: AI, Governance, and Strategic Transformation

Discover how AI, governance, and transformation frameworks are reshaping Third-Party Risk Management. Join OneTrust and Deloitte on Dec 9.

December 09, 2025

AI Governance

Risk-enabled innovation: Uniting AI governance and risk management to accelerate responsible growth

Join OneTrust’s CISO and Head of AI Governance & Privacy to uncover how risk and governance alignment drives responsible AI innovation.

December 04, 2025

Technology Risk & Compliance

Transforming risk management through integrated enterprise risk: A perspective from OneTrust & PwC

Join PwC and OneTrust for a webinar on how leading organizations are reinventing risk management through a connected, digital-first Integrated Risk Management (IRM) approach.

November 04, 2025

Third-Party Risk

Highlights of the Fall OneTrust release for risk solutions

Watch how OneTrust’s latest Risk Solutions release empowers teams with AI-driven vendor onboarding and automated evidence analysis for smarter compliance.

October 28, 2025

Technology Risk & Compliance

How OneTrust supports NIS-2 compliance: On-demand demo of our solution

Watch now this on-demand webinar to see how OneTrust helps organizations identify, manage, and mitigate cybersecurity risks in alignment with NIS-2 compliance obligations.

October 22, 2025

Technology Risk & Compliance

Evolution for compliance programs: A 5-point blueprint to mature your programs

Join our webinar to learn a practical compliance maturity framework and uncover strategies to evolve and optimize your compliance program.

October 07, 2025

Technology Risk & Compliance

Reinventing risk management through integrated risk: A joint perspective from PwC and OneTrust

A joint perspective from PwC and OneTrust on reinventing risk management through integrated risk:

September 11, 2025

Technology Risk & Compliance

5 automation trends modernizing InfoSec in 2025

Learn how automation is transforming InfoSec program management to tackle modern risks, boost resilience, and deliver measurable business value.

August 13, 2025

Technology Risk & Compliance

Taming compliance complexity: Strategies for scaling across frameworks, systems & geographies

Discover how to scale compliance programs amid rising regulations and complexity. Gain actionable strategies to streamline controls, audits, and global oversight.

July 23, 2025

Technology Risk & Compliance

How are you measuring success internally? 