The ROI of Privacy: Telecom Company Achieves Multimillion-Dollar Risk Reduction

Following a competitive bidding process, a leading US-based global cloud communications provider selected BRG to conduct an in-depth assessment of its data protection compliance. This engagement was initiated partially in response to a multimillion-dollar regulatory fine and significant, ongoing concerns from key business partners regarding perceived inadequacies that posed a considerable risk to the provider’s commercial revenue streams. The executive team needed immediate, actionable recommendations.

BRG reviewed the client’s privacy program and discovered a lack of comprehensive documentation, few privacy risk assessments, no standardized risk framework, and inadequate or missing policies, procedures, and other standard governance documents.

To date, BRG has significantly reduced the client’s exposure from an estimated €720 million to approximately €340M; with the current roadmap and support of the executive leadership team, this is expected to continue to decrease.