Zambon concludes a project to digitize Privacy management through OneTrust

Rome, July 11, 2025 – The digitization project of the Record of Processing Activities for Zambon S.p.A. and Zambon Italia S.r.l. was successfully completed at the end of May, in just three months, marking a significant milestone in efficiency and governance in the area of compliance within the international pharmaceutical group.

Promoted by the in-house Privacy Office, part of the Group’s Compliance & Audit Department, the project involved the implementation and customization of OneTrust’s Privacy Automation modules – Data Mapping and PIA & DPIA Automation – enabling structured, centralized, and digital management of data processing.

A new standard for compliance in the pharmaceutical sector

Zambon, long committed to excellence and innovation, reaffirmed its dedication to GDPR Article 30 compliance by undertaking a profound digital transformation in the management of personal data. The project included the creation of various assessment templates – for the creation and updating of processing activities, conducting Data Protection Impact Assessments (DPIAs), and supplier compliance – resulting in more streamlined, structured, and collaborative processes.

A standout feature of the project was the implementation of a process based on the definition of “master processing activities” and “derived processing activities", which can be leveraged by all legal entities within the Group. This ensured consistency and efficiency while eliminating fragmentation and redundancy.

Efficiency and business value

Thanks to an integrated approach and the extensive experience of Syscons consultants in the pharmaceutical sector, the project not only enhanced efficiency and GDPR compliance as outlined above, but also led to a 30% rationalization of the Record of Processing Activities, by eliminating duplicates, inconsistencies, and obsolete entries. This has significantly reduced operational risk, allowing Zambon, with the support of the DPO, to operate using digital, traceable, and compliant tools.

"Supporting Zambon in this process of digitizing and streamlining privacy compliance was rewarding. At Syscons, we leveraged our methodology and years of industry experience, along with the OneTrust platform – with whom we've partnered since 2018 – to critically review and optimize underlying processes in line with best practices. From Zambon, we gained new insights and ways of working that have enriched our expertise. And ultimately, receiving client appreciation – never taken for granted – is what motivates us to keep striving for excellence. That’s the beauty of our work," Andrea Antenucci, President, Syscons.

Zambon

Zambon is a chemical-pharmaceutical company founded on the history and values of an Italian family committed to innovate cure & care to make patients’ lives better. Zambon is present in three different continents - Europe, America and Asia - and has manufacturing plants in Italy, Switzerland, France, China and Brazil. Zambon products are commercialized in 87 countries.

Syscons

Syscons, part of the Impresoft Group, is a boutique systems integrator with a business unit dedicated to Governance, Risk Management and Compliance (GRC). The team, which is certified and has a cross-industry strategic and consulting approach, has gained hands-on experience working in the context of communicating with major international pharmaceutical groups, translating complex business needs into high-value solutions.