Case study
Act 25 Compliance for a Manufacturing Company with 350 to 500 Unionized Employees
Take advantage of Necando's expertise to comply with Act 25
Act 25 Compliance for a Manufacturing Company with 350 to 500 Unionized Employees
The ask
- Ensure compliance with Law 25 to avoid penalties and protect the company’s reputation.
- Effectively manage employees’ and suppliers’ personal data in a multilingual environment (French, English, Spanish).
- Raise awareness among a unionized workforce about new data protection obligations.
- Standardize and secure the collection, storage, and access to personal information.
The answer
Risk Assessment
- Analyze current data management practices across all departments (HR, production, logistics).
Union Consultation
- Collaborate with union representatives to ensure employee buy-in for the new measures.
Multilingual Training Plan
- Develop a training program tailored to the company’s three working languages.
Governance Framework Implementation
- Appoint a Privacy Officer (RPRP) and structure data management processes.
The solution
Processes
- Creation of a personal data and privacy incident registry.
- Development of internal policies tailored to the manufacturing environment, translated into three languages.
- Implementation of a protocol for managing employee requests regarding their personal data.
Training & Awareness
- Deployment of interactive training in French, English, and Spanish.
- Information sessions tailored to production employees, managers, and HR teams.
Legal Support
- Consultation with data protection experts to validate policy and practice compliance.
Technology
- Strengthening cybersecurity systems to protect sensitive data.
- Automating consent tracking and access management for personal data.
The results
Legal Compliance
- Compliance certification obtained before the deadline, validated by an external auditor.
Employee Engagement
- 90% participation rate in training, leading to improved understanding of legal obligations.
Risk Reduction
- 50% decrease in errors related to personal data management due to automation and awareness efforts.
Standardized Practices
- Data management processes harmonized across the organization, improving team collaboration and ensuring ongoing compliance.
Improved Workplace Environment
- Employee acceptance and engagement fostered through union collaboration and clear communication of new measures.