How ASCENDI Protected Its
Personal Data with
SAP PDP (Personal Data Protector)
Solution

About ASCENDI

Ascendi manages infrastructure assets and provides toll collection and operation & maintenance services. Ascendi is a leader in its own market with majority interests in six Portuguese road concessions and an integrated management approach. With 20 years of consolidated experience, Ascendi is recognized by its innovative capacity and operational efficiency.

Project tag:

Project type:
SAP PDP

Project Execution Methodology:
Remote (Via digital connection and media of communication)

Project Completion Period:
10 Months

The Number of organizations within the project:
4

Project Goals

  • Determination of personal data on all platforms of Ascendi that hold personal data
  • Managing access and traceability of personal data
  • Ensuring the confidentiality and integrity of personal data
  • Arrangement of personal data protection policy
  • Auditing and reporting

How Did We Succeed Together
with ASCENDI

Ascendi started the SAP PDP Project as of 01.02.2021. Firstly, the personal data inventories prepared by the company were transferred to SAP. With the PDP solution, authorized users can view personal data according to their authorization, while unauthorized users see all personal data masked.

Since ASCENDI is a Portuguese company, the processes that require GDPR compliance, such as clarification texts, express consents, anonymization and destruction processes, will be able to be monitored on SAP owing to the PDP solution.

The project was successfully set up to live use on 04.12.2021.
Afterward, live support was provided for three weeks.

Results

Thanks to our SAP PDP Project Ascendi has achieved the following results:

  • Ability to record access to personal data within SAP ERP ECC and SAP CRM environments
  • Reportings in accordance with GDPR processes
  • Ability to retrieve personal data inventory reports to be submitted to the local GDPR authority from the SAP system
  • Ability to mask personal data according to user authorizations
  • In case of a data breach, ability to make a record on SAP and forward it to the local authority