ResMed

Resmed creates a healthy global privacy program with OneTrust

The digital health leader leveraged OneTrust's deep privacy research to simplify global compliance

Keeping up with the pace of new privacy regulation
Strategic data protection process
Global privacy program powered by OneTrust

ResMed pioneers innovative solutions that treat and keep people out of the hospital, empowering them to live healthier, higher-quality lives. Its cloud-connected medical devices transform care for people with sleep apnea, COPD, and other chronic diseases, and our comprehensive out-of-hospital software platforms support the professionals and caregivers who help people stay healthy in the home or care setting of their choice.

By enabling better care, ResMed improves quality of life, reduces the impact of chronic disease and lowers costs for consumers and healthcare systems in more than 120 countries. Striving to change 250 million lives by 2025, ResMed manages various categories of personal data across sectors and jurisdictions, so data protection and privacy compliance is critical to continued success.

"There are a lot of reasons you can have a poor night’s sleep. If you think it's related to a health condition, speak to your doctor about sleep apnea, they might be able to help you. If you're losing sleep worried about data privacy, speak with OneTrust, maybe they can help."

Kevin Conolly, Global Privacy Manager

Keeping up with the pace of new privacy regulations

With wide-reaching data protection requirements under regulations like the GDPR, CCPA, ePrivacy, LGPD, and Australia Privacy Act, ResMed understands the importance of shifting their privacy program to account for global compliance.

“Privacy regulations have picked up momentum since the GDPR went into effect, and we want to build on our existing compliance efforts to prepare for new and impending regulations,” said Frederic Varnieu, Director of Privacy, Europe at ResMed.

“Our main challenge was developing a global strategy that adapts to fits our unique, industry-specific privacy compliance needs across business units,” added Elise Flori, ResMed’s Privacy Advisor.

Historically, ResMed’s privacy program was based off tools suitable for lower volumes of data, which made processes inefficient and time-consuming. ResMed instead needed a centralized privacy management platform that better aligned their efforts and accounts for ongoing regulatory updates.

“We were not looking for a tool that simply digitizes our pen-and-paper processes into a centralized database, but a highly configurable platform with multi-lingual capabilities that supports all areas of our organization,” said Varnieu.

Breathing life into strategic data protection processes

ResMed evaluated several vendors in the privacy management technology space and ultimately landed on OneTrust for its Data Mapping Automation, Assessment Automation (PIA/DPIA), Data Subject Access Rights and Cookie Compliance tools.

"Basically, we talk to our account manager, and soon after we have the new feature available in OneTrust."

Frederic Varnieu, Director of Privacy, Europe

“The major benefit of OneTrust is the platform’s agility,” said Varnieu. “We can capitalize on the deep privacy research built into the tool and also customize the templated assessments and questionnaires to mirror our standard verbiage and adapt to our business processes and country-specific needs. This flexibility has been crucial to simplifying our global privacy compliance processes.”

ResMed began their implementation journey with OneTrust’s Data Mapping tool as the core module to manage their processing activities, and the moved on to implementing Assessment Automation. With Assessment Automation, ResMed can distribute privacy-related questionnaires to several project managers throughout the organization, so the task of answering is shared among many people. This process powers the privacy office with more accurate information as privacy is evangelized across business units in the organizations.

ResMed also uses OneTrust for its cookie banners and web compliance to automatically scan websites for cookies, create branded consent and preference banners, and auto-generate cookie list as part of their compliance strategy.

Additionally, ResMed implemented OneTrust’s Data Subject Access Request tool to manage incoming subject rights requests in a central roles-based access dashboard. “The Data Subject Requests tool has the look and feel of a ResMed tool.” said Kevin Conolly, ResMed’s Global Privacy Manager.

Today, OneTrust’s platform is used as a single source of truth for all operations involving personal data and privacy compliance. Additionally, ResMed’s security team saw value in OneTrust and has implemented the platform across their own business unit to simplify their security questionnaire process.

"The major benefit of OneTrust is the platform’s agility. We can capitalize on the deep privacy research built into the tool and also customize the templated assessments and questionnaires to mirror our standard verbiage and adapt to our business processes and country-specific needs. This flexibility has been crucial to simplifying our global privacy compliance processes."

Frederic Varnieu, Director of Privacy, Europe

Sleeping easy with a global privacy program powered by OneTrust

As a company managing massive amounts of special categories of data across the world, ResMed has quickly cultivated a global privacy program and team with the help of OneTrust. ResMed attributes this success to OneTrust’s agile platform and rapid development cycle.

“Basically, we talk to our account manager, and soon after we have the new feature available in OneTrust,” said Varnieu.

Looking ahead, ResMed will be implementing OneTrust’s Consent Management solution and integrating the platform with their IT support team.

“The Consent module would allow ResMed to centrally automate and manage data subject consents across all of our businesses and geographies, and the databases that support them,” said Conolly.

Additionally, ResMed is looking at OneTrust’s Incident & Breach Response module to integrate IT support into OneTrust to enable employees to send a notification in event of an incident or a violation of personal data and notify relevant authorities of possible breaches within the GDPR’s 72-hour time frame.

“There are a lot of reasons you can have a poor night’s sleep. If you think it’s related to a health condition, speak to your doctor about sleep apnea, they might be able to help you. If you’re losing sleep worried about data privacy, speak with OneTrust, maybe they can help,” said Conolly.

ResMed

Resmed creates a healthy global privacy program with OneTrust

Table of contents

"There are a lot of reasons you can have a poor night’s sleep. If you think it's related to a health condition, speak to your doctor about sleep apnea, they might be able to help you. If you're losing sleep worried about data privacy, speak with OneTrust, maybe they can help."

Keeping up with the pace of new privacy regulations

Breathing life into strategic data protection processes

"Basically, we talk to our account manager, and soon after we have the new feature available in OneTrust."

Sleeping easy with a global privacy program powered by OneTrust

You may also like

Privacy Automation

Privacy automation 101: Simplifying data mapping and risk assessments

Join this webinar to learn how OneTrust helps you automate Data Mapping and Privacy Risk Assessments and how to overcome maintenance challenges.

September 25, 2024

Data Discovery & Classification

Enhancing Data Governance: OneTrust and Snowflake strategies for data-driven businesses

Join us for a webinar with Jim Warner and Alex Cash to explore how Snowflake and OneTrust can revolutionize your data governance strategy, helping you maintain data quality, ensure compliance, and exceed marketing ROI in 2024.

September 24, 2024

AI Governance

From policy to practice: Bringing your AI Governance program to life

Join our webinar to gain practical, real-world guidance from industry experts on implementing effective AI governance.

September 10, 2024

AI Governance

Ensuring compliance and operational readiness under the EU AI Act

Join our webinar and learn about the EU AI Act's enforcement requirements and practical strategies for achieving compliance and operational readiness.

August 22, 2024

Privacy Management

OneTrust Live: Unlocking the power of automation for privacy programs

Join us for a live demo where we will discuss the advanced capabilities of OneTrust solutions in data privacy enforcement, first-party data collection, and AI innovation.

August 21, 2024

Cookie Consent

Unpacking Google's third-party cookies decision: What marketers need to know

Join our webinar to learn about Google's decision to keep third-party cookies and how it impacts marketers. Get actionable strategies and stay ahead in data privacy.

August 13, 2024

Privacy Management

Preparing for child data protection laws in the US

Join DataGuidance and a panel of experts as we discuss US privacy laws the protection of minors' data.

August 07, 2024

AI Governance

AI Governance in action: A live demo

Whether your AI is sourced from vendors and third parties or developed in-house, AI Governance supports informed decision-making and helps build trust in the responsible use of AI. Join the live demo webinar to watch OneTrust AI Governance in action.

August 06, 2024

Privacy Management

CPRA in action: OneTrust Live Demo

Join us for a deep dive tour of our suite of technology solutions for operationalizing and automating CPRA requirements across Do Not Share, Consumer Rights and privacy governance operations.

August 01, 2024

Consent & Preferences

The ultimate consent strategy for maximizing customer opt-ins in 2024

Discover the ultimate consent strategy for 2024! Watch our webinar to maximize customer opt-ins, optimize user experience, and maintain compliance.

July 30, 2024

Privacy Automation

Moving through the Data Privacy Maturity Model

Explore the Data Privacy Maturity Model to evolve your data privacy program from compliance-focused to a strategic, value-driven framework.

July 29, 2024

Third-Party Risk

Third-Party AI: Procurement and risk management best practices

As innovation teams race to integrate AI into their products and services, new challenges arise for development teams leveraging third-party models. Join the webinar to gain insights on how to navigate AI vendors while mitigating third-party risks.

July 25, 2024

Privacy Management

Going beyond CCPA

Join us for an in-depth webinar on "Going Beyond CCPA," where we will explore the intricacies of privacy laws, compare major regulations, and provide guidance on enhancing your privacy policy.

July 25, 2024

Privacy Management

New European cyber laws: What you need to know

The EU has adopted several new Cyber Laws that will impact many businesses and will come into force over the next few months (in October in the case of NISD2) and require actions now. Join the webinar to learn about the latest cyber developments.

July 23, 2024

Responsible AI

EU AI Act compliance resource kit

Download this resource kit to help you understand, navigate, and ensure compliance with the EU AI Act.

July 22, 2024

Privacy Management

The evolution of CCPA

Join us for an insightful webinar on "The Evolution of CCPA" where we will delve into the latest amendments, understand their impact, and explore the new requirements and implications for businesses.

July 18, 2024

Privacy Management

Mastering data privacy: Navigating CCPA, CPRA, and beyond

Mastering Data Privacy: Expert Guidance on CCPA, CPRA, GDPR Compliance, Privacy Policy Best Practices, and Live Demo Insights

July 18, 2024

Privacy Management

OneTrust Live: Complying with US Privacy Laws Effective July 2024

Join us on July 17th for a live demo of OneTrust's solutions, providing you with practical tools and strategies to ensure your organization is compliant with both new and existing data privacy laws in the US.

Scaling to new heights with AI Governance