Increased commitment to GDPR and information security in Hjo Municipality

From lack of overview to control and increased engagement

It all started with a need to get an overview of GDPR work. Hjo Municipality, headed by Ulrika Törn Pettersson, had taken stock and started building up its register list. But it was difficult to get an overview when the register list was scattered across different Excel sheets.

“It's one thing to inventory everything, but then to keep it up to date then we needed to have something other than these Excel sheets.”

— Ulrika Törn Pettersson, Administrator, Hjo Municipality

Ulrika had also discovered that there was a great need to clean up and scale down the scope of the register list. It contained a lot of information that was not needed, making the material difficult to manage.

In connection with the municipality of Hjo started Integrity This was used as a starting point to improve quality and get the organization's GDPR administrators more engaged. They therefore chose not to import their existing register list.

‍

Ulrika tells us about the introduction:

“It's been going very well actually. The GDPR administrators became much more engaged when they got to integrate the personal data processing operations into Integrity because it is appealing and fun to work in. Now I think they have become more engaged and have taken more responsibility for their operations.”

‍

GDPR and information security — finally effective and easy

In Hjo Municipality, GDPR and information security work takes place in close cooperation. Therefore, Hjo Municipality also began to work with Security to be able to carry out information classifications and work with risk and impact assessments. Ulrika says that thanks to Security, they were able to make ratings and risk analyses in a slightly easier way than they had done before.

And simplicity is something Hjo Municipality has taken care of. Ulrika says that in the past they had difficulty spreading GDPR and the information security issue in the business. They had too advanced systems and too big ambitions.

“We probably had gotten to that point as well that we felt we had to start very simply. It is better to do something even if it will be at a basic level. Because earlier we had made attempts, but there wasn't much of it and we didn't get everyone on the train. Now we have all the systems and operations.”

Ulrika explains that by putting the work on a simple level, they have been able to focus more on the follow-up — so that the safety-enhancing measures really get rid of. In addition, it helps the municipality meet its goal — to comply with applicable data protection and information security laws and to do so with quality.

“We get an overall picture and control of where we stand and what we need to do to comply with the directives. And we have it gathered in one place which makes it effective to work on the issue.”