eccenca GmbH : From GDPR-compliance to Comprehensive Data Governance
Hans-Christian Brockmann, CEO
Investing in GDPR compliance is, in important respects, a golden opportunity. By selecting the right GDPR solution for the governance of personal data, companies can not only achieve compliance but also reduce the risk of penalties. Hans- Christian Brockmann, CEO, eccenca GmbH, believes that companies can simultaneously enhance compliance with other regulations, such as BCBS 239 for the bank and EMIR and strengthen the ability to manage all kinds of data objects.
Most GDPR solutions are, naturally, focused on personal data. Like legacy data management approaches, this silo-oriented governance focus undermines the ability of the enterprise to become more digital, agile and aware. “The data transparency provided by a semantic data catalog (SDC) or enterprise knowledge graph is the foundation of next-generation management of all corporate data assets,” says Brockmann.
A SDC or enterprise knowledge graph links and maps all available data irrespective of its source, silo, and format to gain maximum intelligence and transparency. According to Brockman, for any approach to govern data and work sustainably—whether for GDPR compliance or any other purpose—data management must be scalable across applications, vendors and even companies in a business ecosystem.
The eccenca GDPR solution not only makes personal data and its processing transparent; it helps organizations to gain, manage and report complete data transparency irrespective of the types and number of applications deployed. Though, the solution is not just another master data management system. Instead of creating another central data silo, the eccenca solution catalogues only meta-data, creating a virtual streetmap of all data types in a company and their interrelation. This enterprise knowledge graph includes meta-data like processing purpose, consent, etc. The solution enables fully automated subject access request across all applications with minimal load to silos. It also helps to ensure that daily data processing operations are made with the appropriate authorization and regulatory/contractual justification.
The backbone of the metadatadriven eccenca approach to modern data management is the eccenca Corporate Memory Suite. The SDC serves as the all-encompassing data map, facilitating the management of data sources, data source content, and use case-specific aspects. The GDPR package enables faulttolerant disambiguation, finding subject data across sources, and supporting the data subject interaction team for inquiry scenarios. The solution integrates a ticketing and process management system including live dashboards, reporting, and documentation for the execution of subject interactions. It also provides compliance status tracking and data needed for dashboards, audit trails, and support management. The data controller can get immediate answers to automated queries.
Clients approach eccenca when they want to establish company-wide command over data usage. Previously this was attainable only by deploying APIs into all applications, which crosschecked the entire organization whenever data was used. The weakness of this legacy approach is that the results rarely are either consistent or comprehensive. Furthermore, the legacy approach results in extremely high payloads that can threaten stability of existing infrastructure. The eccenca solution instead establishes a company-wide data subject index as well as a base for data type, processing purpose, and consent knowledge. Customers can run compliance questions on the central data map and streamline interactions using the subject index, which improves scalability and assures compliance. Organizations can easily adapt to future amendments to the GDPR regulation by accounting for them centrally, rather than via fragmented efforts on the application level, and this translates into lower costs.
In summary, eccenca helps companies both take data privacy seriously and comply with GDPR meaningfully. It also enables more mature and effective data management as a central part of corporate culture.