Netwrix > Case Studies > Nonprofit Organization Accelerates Data Classification to Comply with GDPR and Saves £80,000 Annually

Nonprofit Organization Accelerates Data Classification to Comply with GDPR and Saves £80,000 Annually

Applicable Functions

Facility Management

Use Cases

Object Detection
Regulatory Compliance Monitoring

About The Customer

Horizon Leisure Centres is a not-for-profit organization that operates the largest leisure centres in Havant and Waterlooville in the UK. The organization aims to provide facilities and activities that enhance life quality at an affordable price for everyone in the community. In 2017, these centres attracted more than 1.7 million visitors. Despite being in the entertainment and leisure industry, the organization handles a significant amount of data, which needs to be protected in accordance with GDPR regulations.

The Challenge

Horizon Leisure Centres, a not-for-profit organization operating premier leisure centres in the UK, faced a significant challenge in complying with the General Data Protection Regulation (GDPR). The organization needed to identify and classify the data stored across more than 500,000 folders and subfolders and protect it in accordance with GDPR requirements. This was a daunting task, as the organization also had to be ready to satisfy requests from data subjects, such as processing restrictions and erasures. The challenge was not only to avoid penalties for non-compliance but also to ensure that the sensitive data was secure and only accessible to management.

The Solution

Horizon Leisure Centres turned to Netwrix Auditor for a solution. Impressed with its search and reporting capabilities, the organization used the software to optimize the discovery and classification of sensitive data. The software quickly scanned all data and showed the locations of files with regulated information. After reviewing where the sensitive data resided, the organization ensured these locations were secure and only accessible to management. The organization plans to repeat this process on a quarterly or bi-annual basis. Netwrix Auditor's search capabilities also enabled the organization to be ready to address requests from data subjects quickly and accurately. The software also provided control over activities around sensitive data, allowing the organization to detect anomalous actions that might require attention and configure alerts on events that could pose a risk to regulated data.

Operational Impact

The implementation of Netwrix Auditor has brought significant operational benefits to Horizon Leisure Centres. The organization is now GDPR compliant, avoiding potential penalties for non-compliance. The software's search and reporting capabilities have enabled the organization to have a clear understanding of what's happening with data across file storages. This has not only improved data security but also allowed the organization to respond quickly and accurately to data subject requests. The organization can now regularly review activity summaries for sensitive files and folders to detect any anomalous actions that might require attention. Alerts on events that can pose a risk to regulated data have also been configured, further enhancing data security.

Quantitative Benefit