When Western Union employees need access to sensitive data, they now submit a formal request in Onspring that is tracked and reported for privacy control measures. At any point in time, the privacy team can use Onspring to identify every sensitive’s data point based on who, what, where, when, and why.
Each data request logs:
- Datapoint(s) needed
- Why it is needed
- Where it will be used
Before granting data to users, requests go through a review and approval process with both privacy and legal teams. Once granted, data is provided by the actual data owners within the company.
Common sensitive data use cases:
- Marketing needs email addresses to conduct targeted marketing campaigns
- Compliance must provide regulators with lists of every transaction from one country to another during specific time periods