CASE STUDY
How Haleon Transformed Data Privacy with NowVertical
Faced with scattered sensitive data and growing compliance demands, Haleon, a global leader in consumer healthcare, leveraged NowVertical's solution to gain full visibility, mitigate risks, and secure its reputation by ensuring stringent data privacy across the enterprise, remediating aged and risky data led to a reduction in Cost of Risk by 37%.
Note: visuals in this case study are examples only and not reflective of the client





Results-driven. Creating business value.

Cost of Risk

in scope

deletion of aged files

reduce cost of risk

The Challenge
After demerging from GSK, Haleon inherited 270TB of data from its parent companies. This created a significant data risk, particularly with unstructured data scattered across systems. The main challenges included:
- Assessing PII risk across vast datasets
- Lack of standardized data classification
- No unified policy for handling aged and sensitive data
- Prioritizing remediation actions for high-risk data
Issue Impacts
Without proper data governance, Haleon faced:
- Increased risk of data breaches and exfiltration
- High compliance risks with regulations like GDPR
- Operational inefficiencies that slowed business processes
- Potential reputational damage, financial penalties, and competitive disadvantages
Ready-to-Integrate, AI-Powered Data Management

Real-Time Data Discovery and Risk Identification
Our proprietary NowPrivacy Software provided immediate visibility into their data risks, enabling quick action to secure sensitive information and reduce breach potential.
The NowVertical Platform scanned 8.1 million files and identified over 31,200 high-risk files containing PII, such as people’s names and other sensitive details. Fine-tuning further minimized false positives.
Automated Data Classification and Remediation
Automated workflows prioritized and remediated high-risk data, focusing on sensitive information like credit card details and national IDs. Scripts were developed for bulk deletion of aged files.
Automation reduced manual effort, ensuring consistent data management and lowering the risk of non-compliance and breaches.


Proactive Compliance Management
Interactive dashboards offered insights into privacy and risk metrics, helping stakeholders make informed decisions on data compliance.
Proactive compliance management helped reduced the risk of fines and reputational damage, keeping Haleon ahead of regulatory demands and protecting their customers.
Scalable, Repeatable Governance Framework
Creating a scalable framework, empowering Haleon to manage future data challenges efficiently and maintain consistent governance practices.
The solution provided reusable templates and function-specific insights, enabling stakeholders to streamline PII management and data retention policies.

Implementation
The implementation of the NowVertical solution was divided into 3 phases to maximize impact and scale over time:
Setup: The platform was deployed across Haleon’s UK and US data centers, indexing 10 TB of data.
Workshops: Workshops with stakeholders helped define data standards, terminology, and rules for data discovery.
Quick Wins: The platform quickly identified high-risk PII and aged files, allowing for immediate remediation actions that delivered quick wins.
Process Optimization: Insights gained during the initial phase were used to optimize processes and workflows around data management.
Ongoing Support: NowVertical’s customer success team provided ongoing support, fine-tuning the solution to align with Haleon’s evolving needs and ensuring continuous compliance monitoring
Data Science Integration: Advanced data science capabilities were added to generate deeper insights, allowing Haleon to further optimize data governance and privacy efforts across additional data sets and use cases.
Roadmap for Expansion: The platform was set to expand its capabilities across more datasets and geographies, further embedding data governance into Haleon’s operations.