In a context in which companies that provide essential services or operate critical infrastructures are increasingly facing more demands and threats in matters such as data protection and cybersecurity, Renfe decided to create a Privacy Office and played it safe. It opted for Telefónica Tech and its Cybersecurity, Privacy, GRC, IRM and Regulatory Compliance consultancy subsidiary, Govertis. Thus unifying the legal and technological perspectives.

Highlights of the success story

Multidisciplinary Privacy Office

The Renfe Privacy Office is made up of legal, technical and document management profiles. This diversity of knowledge and experience, provided by Telefónica Tech employees, helps to fulfil the strategic vision of Renfe's Cybersecurity and Privacy Management.

Comprehensive service

Both the professionals assigned to the Privacy Office and Renfe itself are assured of the support, guidance, and specific knowledge that we can provide.

Key actions of the Privacy Office

The strengthening of the register of processing activities; the control of suppliers accessing data; the establishment of a methodology for risk analysis and impact assessments; the approval of internal regulations; or the consistent attention to the mailboxes for exercising rights and the DPD.

Synergies for the achievement of objectives

The legal, organisational and technical aspects of cybersecurity, information security and data protection converge, are integrated and create synergies that favour the achievement of the objectives of the entities that make up the Renfe Group in these fields.

SandaS GRC

Renfe also relies on our platform for Security Governance, Risk Management and Regulatory Compliance assessment.

What others say about us

    “Telefónica's project arises from the award of a public tender, being the best bid the one provided by Telefónica, both in the technical and economic aspects. We particularly valued how they responded to the requirements we had established, the personnel included within the service and of course the experience the company has, in this case Telefónica, in order to provide a guaranteed service."

    Francisco Lázaro, Data Protection Officer at Renfe