The challenge
Iberia managed data flows that were distributed and handled manually across multiple business units (flights, web, apps, customer service), creating obstacles:
- Inconsistent, opaque privacy assessments.
- A lack of clear visibility into personal-data flows.
- Manual cookie and consent management across all platforms.
The solution
Iberia implemented OneTrust through a phased approach:
- Privacy assessment automation (2018) — automated impact assessments.
- Data Mapping (2019) — built an inventory and traceability of personal data.
- Cookie consent management — centralized and automated banners and the consent record.
Results
- Automated assessments that bring greater agility and consistency to risk management.
- Full visibility, with personal-data flows clearly identified and documented.
- Centralized consent management, applied uniformly across web and mobile platforms.
We now have full control over the personal data we process, with an intuitive tool that makes risk assessment and reporting easy.