ASX-listed Retailer gains clarity and insights from Data Privacy & Risk assessment
A prominent Australian ASX-listed retailer successfully completed a strategic initiative to enhance its data governance practices, modernising its approach and setting a new quality benchmark.
The company was considering maximising commercial opportunity through the ethical use of personal information. To meet its commercial objectives, it needed to transform its privacy capability beyond compliance towards a customer-centric approach. Driven to meet the highest regulatory standards, the company took decisive action to ensure that all personal information was handled with the highest levels of integrity and security.
Bringing in HorizonX
Recognising the need for a more comprehensive and efficient approach,the Customer Data Management Team brought in HorizonX to conduct an assessment to ensure a holistic approach to privacy, data protection and management is implemented across the ecosystem. HorizonX was engaged to conduct org-wide data privacy assessment to provide the company with detailed insights on the current level of customer data-privacy-related exposure and uplift the overall privacy strategy. In Phase1, HorizonX's Strategic Advisory team focused on identifying gaps and opportunities for improvement to ensure a comprehensive understanding of the current landscape.
The Challenge
The company was considering maximising commercial opportunity through the ethical use of personal information. To meet its commercial objectives, it needed to transform its privacy capability beyond compliance towards a customer-centric approach. Driven to meet the highest regulatory standards, the company took decisive action to ensure that all personal information was handled with the highest levels of integrity and security.
Working with HorizonX
Bringing in HorizonX
Recognising the need for a more comprehensive and efficient approach, the Customer Data Management Team brought in HorizonX to conduct an assessment to ensure a holistic approach to privacy, data protection and management is implemented across the ecosystem.
HorizonX was engaged to conduct org-wide data privacy assessment to provide the company with detailed insights on the current level of customer data-privacy-related exposure and uplift the overall privacy strategy. In Phase 1, HorizonX's Strategic Advisory team focused on identifying gaps and opportunities for improvement to ensure a comprehensive understanding of the current landscape.
Solution Provided
HorizonX PII Assessment
Extensive review of over 8,000 database tables.
During first phase of the project, HorizonX conducted an extensive preliminary review to map how Personal Identifiable Information (PII) was being managed across the Retail giant’s entire ecosystem – including its 6-subsidiary business. Customer Loyalty, eCommerce, Finance, Communications, Contact Centre and Shared Services.The review covered the full spectrum of data handling, including collection, storage, processing, sharing, governance, security and controls. Spanning 6 business units, nearly 130 systems and over 8,000 database tables – the enterprise-wide review had the necessary breadth and depth needed.
PII Data Governance Assessment
HorizonX’s success is built on providing practical recommendations grounded in deep domain and technical expertise. We prioritise a lean, agile, transparent and collaborative approach in all our engagements.The following deliverables were provided to the ASX-listed retailer as part of our Strategic Advisory service.
- PII Data Catalogue
- A comprehensive spreadsheet detailing the Master PII Data Systems.
- Documentation of PII data collection interfaces, attributes, data flows, storage by business unit, application, and channel.
- List of applications containing PII, including cataloguing of PII attributes, inbound and outbound interfaces, and source and destination of systems. - PII Review Report
- An executive summary of the findings.
- Individual reports for each division covering PII data collection and control strategies, data flow and storage, and data retention practices.Review Findings and Workpapers.
- Detailed documentation of all observations and findings from the assessment program, specifically focusing on PII data.
The Result: A comprehensive overhaul of PII Data Governance
Horizon’s review highlighted several key opportunities to enhance data management and governance practices. Implementing the improvements would further strengthen the retailer's commitment to upholding the highest standards of customer trust and data integrity.
Powerful data flow visualisation & insights
A powerful visualisation of their data flow was created for the first time. Given the challenge of understanding over 8,000 database tables, this achievement was significant. HorizonX successfully mapped the entire data journey—from its and sources through various systems and platforms—to its usage and the types of data captured, such as names, contact details, and buying behaviour.
Comprehensive overview of data
Through the engagement, a detailed data map was achieved, this included identifying the sources of information assets, such as names, addresses, and contact details, while clarifying their purpose and relevance to specific business units, shared services and data platforms. The data was further classified into PII categories—Sensitive, Highly Sensitive, and Critical—each with clear definitions. Automation features were also introduced, enabling employees to update data classifications as needed.
Enhancing data sharing processes and standards
Implementing consistent procedures and standards for data sharing, reduced operational inefficiencies and mitigate potential risks. By strengthening data management practices, the organisation significantly reduced the likelihood of breaches and improve overall security.
.png){kind=icon}
Removing Data Duplication at scale
Data duplication, a common challenge among many organisations, was amplified due to the enterprise-level scale and complexity. It was revealed that the same data was being recorded across different business units.
Simplifying complexities: Centralisation and Streamlined Data Management
The review found that the organisation was managing over 6,000 PII attributes spread across more than 40 databases, with nearly 20 master systems and around 100 internal and external systems in use. This complexity highlighted the critical need for improved centralisation and data modernisation to strengthen data management and governance.
.svg){kind=icon}
Tighter controls and enhanced security
The review also highlighted the need for further modernisation of data security measures. By adopting advanced encryption and enhancing data hygiene practices, the organisation not only strengthens the protection of sensitive information but also reinforce its unwavering commitment to data privacy and security.
Summary
Adopting a customer-centric approach to data-driven decision-making requires balancing exceptional customer experiences and maximising commercial opportunities, while ensuring the responsible, secure and ethical use of personal information.
The Highlights
Enterprise-level
PII Data Governance Assessment
ASX-listed retailer
Resolving Data Management and Governance complexities and gaps at scale
Data Privacy and Regulatory Compliance
Enterprise grade data ecosystem
- 6 Business Units
- <130 technology systems
- 8,000+ database tables
Data Complexity at scale
- +6K PII attributes
- 40+ databases
- 20 master systems
- ~100 internal and external active systems
More stories by HorizonX
Unlock new opportunities today.
Whether you have a question, a project in mind, or just want to discuss possibilities, we're here to help. Contact us today, and let’s turn your ideas into impactful solutions.