“We couldn’t do any of our lifesaving work without trust – from donors, patients we help, or our fundraising supporters,” said Danny Attias, Chief Information Officer at Anthony Nolan. ”Without trust donors would not join the Anthony Nolan stem cell register and we would not be able to give people in need of transplants a second chance of life.”
Building privacy as part of the Anthony Nolan DNA
Data protection has always been an integral part of Anthony Nolan’s operations, however, the GDPR shifted the perspective to make privacy a focus and a priority for everyone at the company. “Culturally, the GDPR reinforced our approach to protecting personal information with our senior leadership and trustees,” said Attias. “More visible value was put upon the importance of protecting the data that we process.”
The GDPR gave Anthony Nolan an opportunity to being the processes of data mapping, assessing risk, and reviewing policies, bringing privacy to the front of everyone’s mind. As they approached their privacy program strategy, the Anthony Nolan team began with data mapping. This was where the company saw the need for a platform to help consolidate the large amounts of data that they process.
“As a single exercise, we could do data mapping ourselves,” said Attias. “But if we wanted to burn it into the culture and have it as an evergreen arrangement where it’s continuously up-to-date, and we want to be able to reference it and help it drive decisions, then we needed a platform.”
Beginning their search in the market specifically for a data mapping tool, Anthony Nolan was pleased to find that OneTrust could not only complete their data mapping, but other aspects of their privacy program as well.
“We looked at the market we assessed a variety of solutions, and then we came across OneTrust,” said Attias. “The platform was fresher, more agile, and easier to engage with. We took a holistic approach to choosing a supplier and didn’t just want a product. OneTrust looked like a company that we wanted to work with.”
Matching with OneTrust to automate comprehensive privacy efforts
When the Anthony Nolan team began the data mapping process they left no stone unturned as they analyzed and assessed the data flow across the organization. “OneTrust made the data mapping process significantly easier for us,” said Attias. “I was able to go into the dashboard, see where we are, how we were progressing data, what the information was, the level of collation, and any duplication.”
As a result, they continued to explore the OneTrust tool, and advanced their privacy program with OneTrust’s Data Mapping Automation, Readiness & Accountability, PIA & DPIA Automation, Cookie Consent and Website Scanning, and Data Subject Rights Management.
