Hybrid GDPR Data Privacy for Cross-Border Financial Services
Millions
of sensitive records tokenized in six months
Hundreds
of SWIFT files tokenized
No new
mainframe or data center in Europe
The client
A global financial services firm that specializes in proxy and shareholder communications. Its core applications run on a mainframe in the United States, but key business data comes from Europe.
The problem
Moving European customer data across borders raised the risk to personal data under GDPR.
No single vendor product fit the firm's mix of systems and requirements.
Rebuilding the infrastructure in Europe would have cost too much.
Building a custom product would have taken too long for the deadlines.
What we did
Combined a masking and data virtualization platform with a tokenization product in one hybrid setup, connected through APIs.
Automated mainframe masking with self-service templates and virtual copies of databases.
Profiled the applications and set security policies to find, classify and protect every sensitive data element.
Wrote custom masking algorithms and analyzed the mainframe CopyBooks.
The result
Hundreds of SWIFT files and millions of sensitive records tokenized in six months.
European data processed across borders in line with GDPR, without a new mainframe or data center in Europe.
A repeatable setup the firm can extend as it grows in the EU.
Tools and systems
A masking and data virtualization platform, a tokenization product, custom masking algorithms and CopyBook analysis on the mainframe.