- Industry: Transportation services.
- Size: +9,900 employees.
- Area: Spain.
- Products: Data Protection.
- Main regulations: GDPR.
EMT
Revolutionizing data protection with an advanced management model
EMT
Customer
The Madrid Municipal Transport Company (EMT) is a public limited company owned by the Madrid City Council. EMT is the global manager of surface mobility in the city of Madrid and is responsible for the management and operation of urban bus services; public bicycle (Bicimad); municipal crane, public and resident parking, and Cable Car. EMT is integrated into the Regional Transport Consortium of Madrid, the authority in charge of planning public transport in Madrid.
EMT manages an extensive urban transport network that includes 2,102 buses and 80 mobility assistance vehicles, operating on 223 bus lines covering 4,097 kilometers. In 2023, its buses traveled almost 98 million kilometers, transporting more than 454 million passengers.
The implementation of GlobalSuite® in EMT not only managed to centralize and improve the management of risks and data protection, but also served as a valuable learning experience for both parties, providing a different and advanced example of management in this area.
Challenges and scope of the project
The project’s challenges included the need to comprehensively manage business continuity plans and centralize relevant information to ensure the availability of critical activities in the event of unavailability, as well as to proactively identify risks and adopt preventive measures.
The implementation of GlobalSuite® in the Madrid Municipal Transport Company (EMT) faced several complex challenges due to EMT’s high maturity in the management of Data Protection and its advanced methodology for impact assessments (PIA). The main challenges were:
- Integration of advanced methodologies: EMT uses a more advanced risk calculation methodology than the recommendations of the AEPD. Its adaptation and integration into GlobalSuite® was a significant challenge.
- Centralization of processes: The need to unify all risk management and data protection processes under a single Risk Analysis and Assessment (AARR) posed difficulties and proved to be a strong point of the software.
- Extensive training: Centralized management required the active collaboration of different coordinators from various EMT Departments. It was a logistical and communication challenge to ensure the understanding and participation of all those involved.
- Time and parameterization: The extensive functionality and capacity of GlobalSuite® was used to adapt it to the specific needs of EMT, as there was a need to manage time efficiently and also resources.
“The implementation of GlobalSuite® in our company has contributed to improving our personal data protection management system.”
Data Protection Officer of EMT Madrid
Solution
To overcome these challenges, the solution focused on the implementation of GlobalSuite® and the constant support of the project team. GlobalSuite® was customized to integrate EMT’s advanced methodology, ensuring that all additional parameters were considered in the system. It was possible to unify all
“The constant collaboration and effective communication between the project team and our team were essential to achieve the project objectives.”
Data Protection Officer of EMT Madrid
Key points
- Optimization in the risk calculation methodology. Customization of GlobalSuite® to include advanced factors and automation of processes that allowed an objective and precise view of the risk factors.
- Centralization and standardization of information, leaving behind manual methods and benefiting from the use of surveys.
- The training sessions for end users contributed to increasing the maturity of the personal data protection system.