Case Study: Everton Football Club achieves GDPR compliance and centralized data management with SureCloud

Everton Football Club chooses SureCloud to help meet its GDPR obligations

Everton Football Club, a major English football club handling sensitive records for over 32,000 season ticket members and a database of more than 600,000 registered fans, needed an automated way to meet GDPR requirements before the May 25, 2018 deadline. Much of the Club’s data and associated processes were being managed manually in spreadsheets, leaving the Data Protection team unable to scale for increasing subject requests, incidents and complex third‑party data flows. Everton selected SureCloud and its cloud‑based SureCloud GDPR Suite to address this challenge.

SureCloud, working with NCC Group, deployed five GDPR Suite applications (including GDPR Program Tracker, GDPR Management, Information Asset Management, Compliance Management for GDPR and Incident Management for GDPR) to map, risk‑assess and centrally manage all data flows. The SureCloud implementation delivered centralized tracking of every data request, automated auditing and real‑time dashboards, plus instant incident logging and ICO reporting where required — enabling Everton to produce activity records and demonstrate GDPR efforts “at the click of a button,” significantly replacing error‑prone spreadsheets and improving speed and visibility across the organisation.

Everton Football Club

Ian Garratt

Data Protection Officer