why from Las Vegas it's the cube covering implementing a world 2018 machito by informatica okay welcome back everyone's the cube live here in Las Vegas at the Venetian ballroom is the cubes exclusive coverage of informatica world 2018 I'm John for your host in analyst here with Peter Baris host and analyst here for two days of coverage our next two guests are jitesh guy who's the senior vice president general manager data quality security and governance for informatica and barry green the chief data officer for bank of ireland great to see you attached great to have you on the cube and great to be here so love having two to smart people talking about data GPRS right around the corner and friday you're at the bank of ireland so in the middle of it while you're in you're in this in the territory you're in the heart get any sleep what talk about your role at the bank what are you guys doing I want to get into the GDP RS right on our doorstep it's going to major implications for data as a strategic asset talk about what you do so for me we've created a daily management framework frameworks pretty simple map process get context for data put it into the business data model or sign ownership put data quality over it and then maintain it using a risk model operational risk model now it doesn't matter with GDP our or becbs whatever it is it's about adding value to data understanding day they're using it for them and making sure you've got better customer experience all the good things you know GDP are is important but it's not the only thing you guys are new to managing data and certainly complies your financials bank so it's not a new thing what is how is GDP are being rolled out how is it impacting you guys what are you paying attention to what's the impact so the big thing about GDP are is we're having to understand where our key customer data's sits in the physical systems we're looking at mapping key processes something to see and what it's used for we're assigning ownership to people who own data so we can basically make decisions about it in the future GDP ours a bit like becbs that's going to evolve right you're not going to be GDP are compliant on May 25th you're gonna have to put in place the infrastructure the tooling the governance the management to make sure that as an organization you know you were using data the way it's supposed to be if you want to be a digital organization you have to manage data this is just pushing along they had evolution of data being important to an organization but just as y2k wasn't about making the world safe for mainframes in the year 2000 it forced a separation and understanding of the separation that's required between applications and data so gdpr is another one of those events it's forcing a separation in this case between data and the notion of data assets great so take us through how the thought process of gdpr has catalyzed new thinking within the bank about how we think about data differently as a consequence I think what it's done so we've developed the framework so we can apply it to any problem right I think what it's done is it's raised up data's the risk of data more generally so people talk about data as an asset I've talked about data as a liability right so it's a contingent liability if you think about gdpr it's raise that awareness up that we can't continue to operate and tricked out of the way we have in the past so there's a whole cultural change going on around how we treat data and there's a big understanding training going on about everyone knowing why they use data making sure that they don't use it for the purpose it's not used for and generally it's a big education cultural change very how would you describe the mindset for this new thinking it certainly I agree with you it's at the strategic nature center the center of the center of the value proposition right now on all aspects not just some department what's the mindset that people should be thinking about when they think of data okay should I have access to this data but do I need it for the role I'm undertaking and if it was my data would I be treating it you know how would I shred it how would I want it to be treated even if you're the subject yeah exactly it's almost like you know if I had my data being used for certain thing context is that the way I'd want my data treated there's almost in the old adage you know do unto others as you would have you done to you yeah ethics is important yeah to church talk about the informatics opportunity because you guys really timings pretty awesome for informatica with the catalog you guys have an interesting opportunity right now to come in and do a lot of good things for clients that's that's exactly right we've we've been working very hard with our clients over the last 18 months to help them on this gdpr journey what we you know think of as supporting their privacy and protection and and you mentioned catalog you know our we have our enterprise data catalog powered by Claire our AI machine learning capabilities and metadata and that helps you get an organized view of all your data assets within the enterprise leveraging that same technology we have a security source offering which is effectively a data subject catalog to help our customers understand where exactly is the data subject sensitive data not where the organization's data is but the data subject sensitive data within the organization where their national identifiers information is how where their personal home address email phone etc is and how many occurrences and what systems why so that our customers can take that information and more effectively respond to the data subject if the data subject wants to invoke you know the right to be forgotten or right for data portability etc as well as take that same information and demonstrate to the regulator that they are processing this sensitive data with the appropriate with the appropriate consent from the data subject as well as have the systems I presume to then be able to expose to the subject the reasons why the data may in fact still be part of the asset of the bank correct so I I hadn't heard that before we've had other company cells that they're going to help companies find subject data but you guys are taping us taking a step further and allowing the bank for in this case do we have to look at that data from the subjects perspective exactly right because it's not just with some regulations financial regulations you need to demonstrate the quality and trustworthiness of the data here at to the regulator here it's demonstrating to the data subject themselves the individual themselves how you're processing how you're treating their data how protected or unprotected it is and and how you're using it to market to them how you using to become part of the metadata that's exactly right it's using the same metadata foundation too but focused on the data subject specifically interesting interpret ection aspect of it if I say I want my right to be forgotten and you can hold data for something mean where's the where's the protection aspect for the business and the user is there conflict there how do you guys handle that yes that's interesting there is a conflict so there's a conflict already with an existing regulation so you know um the thing that a lot of people aren't talking about is you can hold data so if someone can't just delete data if you want to hold an account or you know these reasons for using it you got a legitimate use for using it you can still hold it you have to tell a customer why you're using it so there's a lot of context here which they didn't have before so it's giving the customer the power to understand what the data is being used for the context is being used for and so they know it's not gonna be used for sort of spiritless marketing campaigns it's being used for you know the reason that does that extra work for you guys is that automated this is where we start to get into the question next yeah which is a context the context is the metadata and you're going to be able to capture that context explicitly as these data elements have this context in metadata allows you to do that with some degree of certainty and you know relatively low cost I assume it's all about reuse right so a lot of what we've done in the past and on its way at the bank um to me everyone's done in the past is they've understood something and then thrown it away so with Exxon you can record it you know record it then with the metadata you can join the metadata in Exxon so you can do in a high level process understand what data is used at the context is used for who owns that quality all these kind of business relevant things then you put the metadata out and you've got a system view it's very very powerful so the technology is starting to allow us to automate but it's all about gathering it reusing it and making sure you understand it right that's for you know from a from a data subject catalog standpoint you get the technical metadata it tells you across your data landscape where all the sensitive information is for Barry green you marry that up with the business metadata of how is that sensitive information being used in every step of let's say customer onboarding your mission critical business processes within the organization and that's what you demonstrate to a data subject or a regulator if this is how I'm processing it based on this consent now if they invoke the right to be forgotten there's various things you can do there because there's conflicts you can just mask the data using our masking capabilities and then it's true forgotten or you can archive the data and remove it from a particular business process that is marketing or selling to them if that's so yeah choice is it some flexibility correct or or slight maybe slightly differently Mystere forgot that's right you can get work out of that data in an appropriate way so the customer can be forgotten so that this this kind of work now that you cannot apply that data to marketing whatever else it might be for when it comes to understanding better products or building better products whatever else through masking you can apply the data still to that work because it's a legitimate use under the law exactly also think about the fact you've mask key critical data right so the thing about data privacy in general was you know if you can't understand a data subject so if you can hide certain pieces of data and you can't identify them you didn't aggregate it you can it's not personal data anymore so you know there's this some real nuance there's a lot of people aren't talking about these things but these new icers will be surfaced yeah yeah because certainly it's a it's the beginning of a generational shift there gonna be some pain points coming online I mean we're hearing some people complaining here and there you guys are you know used to this some industries are like used to dealing with Brad you know compliance like no big deal some people are fast and loose with their data like wait a minute I said you can't be a digital wanker we can't be a head of digital propositions you don't understand your data you know you and you don't understand it and manage it so this is an opportunity to do this across the enterprise it exposes companies that have not planned for an architected data whether that's investment in data engineering or have staff this is a huge issue and pools and tools that can't support that process I mean if you got a I mean people are looking in their organization going oh man we've really don't have it or they're ready the exciting part is you know organizations have focused on quality and trustworthiness of their data we're now taking that same data and focusing on the privacy and protection and the ethical treatment of it and leveraging the appropriate technologies which happen to be very similar fundamentally for quality and Trust and privacy and protection and and in the absence of a global standard for GDP our we're we're seeing organizations without GDP our as a de facto standard in fact Facebook just announced that they're treating all users data you know that was one of our research predict yes yeah very obvious I mean we'll see how eleven have any teeth or anything but you know Facebook's got their own challenge but it's an opportunity for a clean sheet of paper Friday May 27 I'm sure there's gonna be a ton of class-action lawsuits against Facebook jitesh Barry thanks for coming on great to see you thanks for everything in Ireland we're here on the open and informatica world right and written the solutions expose the cue bringing you all the data right here in the catalog you got the cube dotnet check it out I'm people John free with Peterborough's stay with us for more day to coverage at different Matic world after this short break