GDPR and the challenge of data identification
The primary challenge lay in identifying and classifying personal data within a highly complex and organically grown IT landscape. With approximately 400 legal entities, around 1,700 applications, and additional systems introduced through the Innogy integration, the data environment was extremely heterogeneous.
In addition, multiple requirements had to be addressed simultaneously: anonymization of non-production systems, deletion of outdated data, fulfillment of customer data access requests, and the implementation of blocking and deletion processes. The large number of systems, data sources, and regulatory requirements made a structured, technology-driven approach essential.
End-to-End ILM implementation with the Data Conversion Suite
To address these complex requirements, Natuvion implemented a combination of SAP standard solutions and proprietary technology. Alongside SAP Information Lifecycle Management (ILM) and the Information Retrieval Framework (IRF), the Data Conversion Suite served as the central platform for identifying, transforming, and cleansing personal data.
Natuvion assumed full responsibility for the implementation and customization of the required solutions. This included the depersonalization and pseudonymization of data, the implementation of a comprehensive consent management framework, and the development of retention and deletion logic.
The project initially launched in Germany before being rolled out internationally. Through a structured implementation approach, a holistic GDPR program was established, ensuring consistent standards for handling personal data across multiple countries.
Sustainable GDPR compliance and reduced risks
With the successful implementation of the ILM solution, E.ON significantly improved data privacy compliance across its entire system landscape. Personal data can now be managed, blocked, and deleted in accordance with regulatory requirements. At the same time, the risk of data privacy violations and the associated financial and reputational damages was substantially reduced. Business departments also benefit from more efficient processes, particularly in handling customer information requests. In addition, the retention and deletion matrix developed during the project now serves as a standardized foundation for future systems and initiatives.
The program was successfully rolled out across 17 countries and now provides the foundation for future rollouts involving additional regions and systems – particularly in the context of the ongoing Innogy integration.
.gif)
/eon_SuccessStory_Logo_290x90.svg){kind=logo}