Redgate logo for print use

End-to-end Database DevOps

Case study

Driving a successful data compliance approach in the finance sector

Customer

Republic Bank are a community bank in the US focused on becoming the most technically advanced bank in their sector. They have 1,200 employees and $5+ billion in assets.

Challenge

The organization needed to identify an enterprise-wide solution that enabled data classification and cataloguing that satisfied the needs of GDPR and CCPA.

Solution

A tool to protect their data and comply with data privacy laws relevant to their industry including CPPA, GDPR, and SOX.

Results

A data protection solution that enables classification and cataloguing of an enterprise-wide estate and satisfies key stakeholders across the organization.

The Customer

Republic Bank are a community bank in the US focused on becoming the most technically advanced bank in their sector. They have 1,200 employees and $5+ billion in assets.

They are strategically focused on delivering value to their customers quickly with pioneering apps and services that make banking easier. To meet that demand, 10% of their team are in IT and they have over 1,900 databases and more than 100 production servers.

1900+Databases100Production Servers

We’ll have everything that’s needed to demonstrate how we protect data before the auditors even walk through the door.

Chris Yates, Director of Data and Architecture

The Challenge

The organization needed to identify and categorize Personally Identifiable Information (PII) they hold and put in place measures to protect sensitive data. They needed to identify an enterprise-wide solution that enabled both data classification and cataloguing that satisfied the needs of GDPR and CCPA.

The tool identifies and tags those that contain data like names, addresses, credit card numbers, and we only had to look at the ones that contain specific data.

Chris Yates, Director of Data and Architecture

The Solution

The solution needed to fit these requirements for the customer:

  • An enterprise wide solution suitable for banking and financial services.
  • Enables both classifying data and taking remedial actions such as data masking.
  • Easy to implement.
  • A tool with default tagging to enable a quick start to classification across the whole estate
  • Fits the needs of multiple stakeholders, including data governance, data stewards, and the C-suite.
  • Cohesive solution to bring key stakeholders across the organization together

The organization chose Redgate SQL Data Catalog. It enabled them to protect their data and comply with data privacy laws relevant to their industry including CPPA and SOX. During the Proof of Concept, the solution satisfied Republic Bank’s external data protection auditors, which was a significant reason they chose the tool.

SQL Data Catalog provides automatic classification suggestions out of the gate so it didn’t take hours and hours for us to go in and make modifications.

Chris Yates, Director of Data and Architecture

The Results

Redgate SQL Data Catalog gave Republic Bank:

  • A data protection solution that fitted all the needs within the organization.
  • A real-time view on their data.
  • Strong cross-divisional relationships across the organization, built up during implementation.
  • The ability to easily evidence internal processes to third party auditors.
  • A way to identify data stewards and those within the organization who are responsible for and care about the data for their part of the business.
  • Automatic data suggestions which significantly reduced the time needed for the classification.

The organization also invested in Redgate’s SQL Provision tool to support the next stage of their data protection journey.

article

Practical steps for end-to-end data protection

If you plan to make production data available for development and test purposes, you'll need to understand which columns contain personal or sensitive data, create a data catalog to record those decisions, devise and implement a data masking, and then provision the sanitized database copies. Richard Macaskill show how to automate as much of this process as possible.

Read the article

get started

Get started with short videos and documentation

Watch this course and learn how to use SQL Data Catalog to classify data across your SQL Server estate, ensuring that the correct data is protected - in the correct way - allowing you to focus investment on the more critical areas.

Learn more

Case study

Driving a successful data compliance approach in the finance sector

Republic Bank needed to identify and categorize Personally Identifiable Information (PII) they hold and put in place measures to protect sensitive data.

Contents

The Customer

Republic Bank are a community bank in the US focused on becoming the most technically advanced bank in their sector. They have 1,200 employees and $5+ billion in assets.

The Challenge

The organization needed to identify an enterprise-wide solution that enabled data classification and cataloguing that satisfied the needs of GDPR and CCPA.

The Solution

A tool to protect their data and comply with data privacy laws relevant to their industry including CPPA, GDPR, and SOX.

The Results

A data protection solution that enables classification and cataloguing of an enterprise-wide estate and satisfies key stakeholders across the organization.

We’ll have everything that’s needed to demonstrate how we protect data before the auditors even walk through the door.

Chris Yates, Director of Data and Architecture

The Customer

Republic Bank are a community bank in the US focused on becoming the most technically advanced bank in their sector. They have 1,200 employees and $5+ billion in assets.

They are strategically focused on delivering value to their customers quickly with pioneering apps and services that make banking easier. To meet that demand, 10% of their team are in IT and they have over 1,900 databases and more than 100 production servers.

1900+Databases100Production Servers

The tool identifies and tags those that contain data like names, addresses, credit card numbers, and we only had to look at the ones that contain specific data.

Chris Yates, Director of Data and Architecture

The Challenge

The organization needed to identify and categorize Personally Identifiable Information (PII) they hold and put in place measures to protect sensitive data. They needed to identify an enterprise-wide solution that enabled both data classification and cataloguing that satisfied the needs of GDPR and CCPA.

SQL Data Catalog provides automatic classification suggestions out of the gate so it didn’t take hours and hours for us to go in and make modifications.

Chris Yates, Director of Data and Architecture

The Solution

The solution needed to fit these requirements for the customer:

  • An enterprise wide solution suitable for banking and financial services.
  • Enables both classifying data and taking remedial actions such as data masking.
  • Easy to implement.
  • A tool with default tagging to enable a quick start to classification across the whole estate
  • Fits the needs of multiple stakeholders, including data governance, data stewards, and the C-suite.
  • Cohesive solution to bring key stakeholders across the organization together

The organization chose Redgate SQL Data Catalog. It enabled them to protect their data and comply with data privacy laws relevant to their industry including CPPA and SOX. During the Proof of Concept, the solution satisfied Republic Bank’s external data protection auditors, which was a significant reason they chose the tool.

The Results

Redgate SQL Data Catalog gave Republic Bank:

  • A data protection solution that fitted all the needs within the organization.
  • A real-time view on their data.
  • Strong cross-divisional relationships across the organization, built up during implementation.
  • The ability to easily evidence internal processes to third party auditors.
  • A way to identify data stewards and those within the organization who are responsible for and care about the data for their part of the business.
  • Automatic data suggestions which significantly reduced the time needed for the classification.

The organization also invested in Redgate’s SQL Provision tool to support the next stage of their data protection journey.