--- title: "SAP GDPR compliance: An interview with MAPA" description: "SAP GDPR & Data Privacy: We interviewed our client MAPA about the challenges around compliance with GDPR for their SAP systems, and why they chose our SAP Data Privacy Suite, including Data Secure, Data Disclose, Data Redact, Data Retain." image: https://www.epiuselabs.com/hubfs/mapa_interview_3.jpg --- ** EN ** [FR ](https://www.epiuselabs.com/fr?hsLang=fr) [DE ](https://epiuse.de/?hsLang=en) [EN ](https://www.epiuselabs.com/interview-mapa-sap-gdpr) [ES ](https://www.epiuselabs.com/es?hsLang=es) [IT ](https://www.epiuselabs.com/it?hsLang=it) [KO ](https://www.epiuselabs.com/ko?hsLang=ko) | [Contact Us](https://www.epiuselabs.com/contact-us?hsLang=en)   ** ** - [SOFTWARE](https://www.epiuselabs.com/interview-mapa-sap-gdpr#) [**SOFTWARE](https://www.epiuselabs.com/interview-mapa-sap-gdpr#) [SAP HCM & Payroll](https://www.epiuselabs.com/achieve-an-intelligent-hr-enterprise?hsLang=en) [HCM Productivity Suite](https://www.epiuselabs.com/hcm-productivity-suite?hsLang=en) [Query Manager](https://www.epiuselabs.com/query-manager?hsLang=en) [Query Manager Add-ons](https://www.epiuselabs.com/query-manager-add-ons?hsLang=en) [Document Builder](https://www.epiuselabs.com/document-builder?hsLang=en) [Payroll Pack](https://www.epiuselabs.com/payroll-pack?hsLang=en) [Variance Monitor](https://www.epiuselabs.com/variance-monitor?hsLang=en) [DSM for HCM](https://www.epiuselabs.com/data-sync-manager-for-hcm?hsLang=en) [GeoClock](https://www.epiuselabs.com/geoclock?hsLang=en) [ALL SOLUTIONS](https://www.epiuselabs.com/sap-software-and-services?hsLang=en) [SAP Landscape & Test Data Management](https://www.epiuselabs.com/optimize-sap-data-and-environments?hsLang=en) [Data Sync Manager (DSM) suite](https://www.epiuselabs.com/data-sync-manager-product-suite?hsLang=en) [ - System Builder/Shell Sync](https://www.epiuselabs.com/system-builder?hsLang=en) [ - Object Sync](https://www.epiuselabs.com/object-sync?hsLang=en) [ - Client Sync](https://www.epiuselabs.com/client-sync?hsLang=en) [ - Object Extractor](https://www.epiuselabs.com/object-extractor?hsLang=en) [ - Data Secure](https://www.epiuselabs.com/data-secure?hsLang=en) [Archive Central](https://www.epiuselabs.com/archive-central?hsLang=en) Support & Training [Client Central](https://www.epiuselabs.com/client-central?hsLang=en) [E-learning & training](https://www.epiuselabs.com/training?hsLang=en) [SAP Data Privacy & Security](https://www.epiuselabs.com/manage-your-sap-data-privacy-security-and-risk?hsLang=en) [Data Privacy suite](https://www.epiuselabs.com/data-privacy-gdpr-suite?hsLang=en) [- Data Secure](https://www.epiuselabs.com/data-secure?hsLang=en) [- Data Disclose](https://www.epiuselabs.com/data-disclose?hsLang=en) [- Data Redact](https://www.epiuselabs.com/data-redact?hsLang=en) [- Data Retain](https://www.epiuselabs.com/data-retain?hsLang=en) [Soterion (GRC)](https://www.epiuselabs.com/soterion?hsLang=en) [- License Manager](https://www.epiuselabs.com/optimize-your-sap-licensing-strategy?hsLang=en) - [SERVICES](https://www.epiuselabs.com/interview-mapa-sap-gdpr#) [**SERVICES](https://www.epiuselabs.com/interview-mapa-sap-gdpr#) [SAP HCM & Payroll](https://www.epiuselabs.com/achieve-an-intelligent-hr-enterprise?hsLang=en) [PRISM for HR & Payroll](https://www.epiuselabs.com/prism-for-hr-payroll?hsLang=en) [SAP SuccessFactors Integration monitoring](https://www.epiuselabs.com/sap-successfactors-integration-monitoring?hsLang=en) [Payroll reporting](https://www.epiuselabs.com/query-manager-sap-successfactors-payroll-reporting?hsLang=en) [Report writing](https://www.epiuselabs.com/report-writing?hsLang=en) [Client-specific Development](https://www.epiuselabs.com/deliver-client-specific-innovations?hsLang=en) [Custom development](https://www.epiuselabs.com/custom-solutions?hsLang=en) [SAP BTP](https://www.epiuselabs.com/sap-btp?hsLang=en) [ALL SOLUTIONS](https://www.epiuselabs.com/sap-software-and-services?hsLang=en) [SAP Landscape & Test Data Management](https://www.epiuselabs.com/transform-sap-landscapes?hsLang=en) [PRISM Migrations to S/4HANA](https://www.epiuselabs.com/prism-migrate-to-s4-hana?hsLang=en) [ System Landscape Optimization (SLO)](https://www.epiuselabs.com/system-landscape-optimization?hsLang=en) [Managed data refresh services](https://www.epiuselabs.com/managed-refresh-services?hsLang=en) [SAP Data Privacy & Security](https://www.epiuselabs.com/manage-your-sap-data-privacy-security-and-risk?hsLang=en) [SAP data privacy assessment service](https://www.epiuselabs.com/sap-data-privacy-assessment-service?hsLang=en)[Mass data removal services](https://www.epiuselabs.com/data-removal-data-privacy-gdpr-services?hsLang=en) [SAP Managed Services](https://www.epiuselabs.com/cloud-and-managed-services?hsLang=en) [SAP Managed Services](https://www.epiuselabs.com/cloud-and-managed-services?hsLang=en) [Cloud migrations](https://www.epiuselabs.com/cloud-migrations?hsLang=en) [Basis managed services](https://www.epiuselabs.com/managed-services?hsLang=en) [Private cloud hosting](https://www.epiuselabs.com/cloud-hosting-services?hsLang=en) [SAP on AWS ](https://aws.epiuse.com/?hsLang=en) [SAP on Azure](https://www.epiuselabs.com/sap-on-azure?hsLang=en) [Premium Support Services](https://www.epiuselabs.com/premium-support-services?hsLang=en) [BRIDGE Managed Services ](https://www.epiuselabs.com/bridge-the-basis-gap-in-sap-rise?hsLang=en) - [All Solutions](https://www.epiuselabs.com/sap-software-and-services?hsLang=en) - [Request Estimate](https://www.epiuselabs.com/request-estimate?hsLang=en) - [Resources](https://www.epiuselabs.com/interview-mapa-sap-gdpr#) [**Resources](https://www.epiuselabs.com/interview-mapa-sap-gdpr#) [Blogs Explore latest updates: SAP Landscapes, HCM, Data Privacy, Cloud & AI](https://www.epiuselabs.com/blogs?hsLang=en) [Events and Webinars Discover all our events and webinars from around the world](https://www.epiuselabs.com/events-and-webinars?hsLang=en) [Video library Watch videos and improve your SAP knowledge](https://www.epiuselabs.com/useful-sap-related-videos?hsLang=en) Ultimate Guides: [ - Journey from SAP HCM and Payroll to SAP SuccessFactors](https://www.epiuselabs.com/ultimate-guide-sap-hcm-payroll-options?hsLang=en) [ - SAP S/4HANA data and landscape management](https://www.epiuselabs.com/ultimate-guide-sap-s4hana-data-and-landscape-management?hsLang=en) [ - Road to SAP data privacy compliance](https://www.epiuselabs.com/ultimate-guide-road-to-sap-data-privacy-compliance?hsLang=en) [Ebooks, guides & more... Download free ebooks, expert guides and more](https://www.epiuselabs.com/useful-sap-downloads?hsLang=en) [Client success stories Learn how others succeeded with EPI-USE Labs](https://www.epiuselabs.com/view-success-stories?hsLang=en) [Client support Get help with your EPI-USE Labs solutions](https://www.epiuselabs.com/product-support?hsLang=en) [Training Find training to support your SAP journey](https://www.epiuselabs.com/training?hsLang=en) - [About](https://www.epiuselabs.com/interview-mapa-sap-gdpr#) [**About](https://www.epiuselabs.com/interview-mapa-sap-gdpr#) [Company](https://www.epiuselabs.com/about-us?hsLang=en) [Who we are](https://www.epiuselabs.com/about-us?hsLang=en) [Our culture](https://www.epiuselabs.com/our-culture?hsLang=en) [Careers](https://www.epiuselabs.com/careers?hsLang=en) [Partners](https://www.epiuselabs.com/partners?hsLang=en) [EPI-USE AppHaus Pretoria](https://www.epiuse.com/apphaus-pretoria?hsLang=en) [Our locations](https://www.epiuselabs.com/office-locations?hsLang=en) [Get in touch](https://www.epiuselabs.com/contact-us?hsLang=en) [Contact us](https://www.epiuselabs.com/contact-us?hsLang=en) [Get support](https://clientcentral.io) [Latest news](https://www.epiuselabs.com/news/topic/news?hsLang=en) [INSPIRE events](https://www.epiuselabs.com/epi-use-labs-user-group?hsLang=en) [EXPLORE](https://www.epiuselabs.com/interactive-company-brochure?hsLang=en) # SAP GDPR compliance: An interview with MAPA One of EPI-USE Labs' most prestigious clients, MAPA, is a leading company in the market segments of contraception (BILLY BOY, Fromms and Blausiegel), household items (SPONTEX) and baby care (NUK). We recently interviewed a MAPA representative about the challenges they faced around compliance with GDPR (the General Data Protection Regulation) for their SAP systems, and why they chose to implement our SAP Data Privacy Suite. ** Which technical and conceptual challenges did you face in implementing the requirements of the European General Data Protection Regulation (GDPR)? #### Answer: From a technical point of view, our biggest concern was around our SAP system that is our  ERP system. To ensure our data consistency, we generally avoid deleting data from the system. With SAP standard functions, sensitive data records cannot be deleted without further processing. This data is simply stored in a different location by means of archiving. The problem is that it can be restored there. The redaction of individual fields within the data records was also not an option we had available. The SAP solution for solving the GDPR challenge was presented during a meeting at the DSAG (German SAP User Group). This confirmed the problem for us, but the SAP solution seemed unsuitable, not least because of the costs and the implementation effort. In the end, we came to the conclusion that it would not be possible with existing standard SAP tools to delete data from the SAP system according to the requirements of GDPR. We had to find out in detail which personal data was stored, and where it was stored within the SAP landscape. Within the process documentation, initially, we were only able to demonstrate which data records needed to be potentially redacted: this document was prepared for the technical conversion and extended to the detail level of individual fields. ** Why did you decide to invest in the SAP Data Privacy Suite from EPI-USE Labs? #### Answer: We have been anonymizing SAP test data quickly and easily for years with EPI-USE Labs’ Data Secure, part of their Data Sync Manager product suite, in our non-productive environments. That's why we trusted the technical accuracy of anonymization even for critical and complex data structures, such as the SAP HCM module. To implement the data privacy regulation (GDPR), however, individual data records must be redacted in Production systems. The approach EPI-USE Labs took with their SAP Data Privacy Suite fitted our approach: With Data Disclose, the entire SAP systems are searched and sensitive data located. A person’s data footprint of a person is found, retrieved and made available. For further automation, it also searches in non-SAP systems as soon as they are integrated through APIs. ** What were the milestones in the implementation of GDPR – in particular, Article 15 (Right of Access) and Article 17 (Right to Erasure)? #### Answer: A first milestone was the general preparation of the SAP system. Before the installation of the provided transports, minimum technical requirements had to be met. Our system was initially not fully prepared for the use of the GDPR Compliance Suite. Since EPI-USE Labs relies on the modern FIORI surface technology, we took this as an opportunity to prepare our Basis for the future and to import the necessary support packages. The general technical requirements for the SAP Data Privacy Suite are NetWeaver 7.0 and Fiori Gateway. Data Disclose could then be activated immediately. On the basis of the delivered template, the relevant personal data was refined and the foundation was laid for the requirements of GDPR Article 15 (right of access) for the SAP system. In the next project phase, the right to deletion according to GDPR  Article 17 will be implemented. EPI-USE Labs also offers the appropriate solution to redact data. As part of the SAP Data Privacy Suite, Data Redact can quickly and seamlessly redact sensitive or personal data without deleting entire data records. This means that the data can no longer be related to a specific person (or data subject), but reports can be created as usual without affecting the referential integrity of the data. Before Data Redact was introduced, we had to define which fields should be anonymized in the area of conflict between retention policies and data economy. Customer-specific extensions to the data structures also had to be taken into account. The effort required in addition to the template generally depends on how closely the system's own data structure is kept with the SAP standard. ** What are the benefits you experience from the EPI-USE Labs' SAP Data Privacy Suite? #### Answer: The biggest advantage is that data integrity is still guaranteed. Thus, for example, customer orders are still traceable since only the sensitive customer data is redacted while all orders and sold items can still be viewed. It is only the assignment to the Customer that is no longer possible. This means that all test systems remain fully functional and Test orders can still be processed. If entire data areas have to be archived, the data integrity would suffer. ** Is there a future strategy for the extended implementation of GDPR’s Article 5 (data minimisation principle)? #### Answer: The proportionate processing of personal data in accordance with Article 5 of GDPR is another key element in complying with the Data Protection Regulation. When we introduced Data Secure, we discussed using the EPI-USE Labs’ Client Sync solution to copy SAP data selectively. This is a time slice of the production system on test and training systems to create test data. This selective client copy replaces the system copy and supports compliance with Article 5. We also assume that the legislation will become stricter in the future. We plan to use the SAP Data Privacy Suite in all areas of the company. The use of the Suite should not remain a central task of IT, but be decentralised to give each department the ability to track down the right data and make it anonymous. #### Personalised gifts for MAPA: customising SAP using DSM and our SAP Data Privacy Suite MAPA has a bespoke ordering process for babies’ dummies (known as pacifiers in the US). This allows someone to go online and choose bespoke images and colours, or even upload images to be printed on the dummy, potentially along with the baby’s name and or/date of birth. Although the data is stored in SAP, it's not a standard customer master.  We were quickly able to build a new Legal Person Type and link it to a new custom business object for the ‘One time orders’, and make this available for Data Disclose (part of our SAP Data Privacy Suite). We were also able to use Data Redact for sensitive data including names, email addresses, dates of birth and more. Find out more in this short video from Paul Hammersley. ![](https://fast.wistia.com/embed/medias/jmzgop2xdn/swatch) [![Group Elephant](https://2930497.fs1.hubspotusercontent-na1.net/hubfs/2930497/02-Shared-Elements/10-Groupelephant/Member%20of%20Group%20Elephant_RGB_White.svg) a member of Group Elephant ](http://www.groupelephant.com/) [beyond corporate purpose ![ERP](https://cdn2.hubspot.net/hubfs/2930497/images/ERP_Logo.svg) ](http://www.erp.ngo/) #### Manage your sap environment - [Run SAP in the cloud](https://www.epiuselabs.com/sap-cloud-infrastructure?hsLang=en) - [Premium Support Services](https://www.epiuselabs.com/premium-support-services?hsLang=en) - [Custom development](https://www.epiuselabs.com/custom-solutions?hsLang=en) - [Sunset legacy SAP systems](https://www.epiuselabs.com/archive-central?hsLang=en) #### Optimize your SAP Landscape - [SAP divestitures & mergers](https://www.epiuselabs.com/optimize-your-sap-landscape?hsLang=en#divestitures_and_carve_outs) - [Create lean test systems](https://www.epiuselabs.com/data-sync-manager-product-suite?hsLang=en) - [Streamline SAP cloud migrations](https://www.epiuselabs.com/cloud-migrations?hsLang=en) - [Get test data on demand](https://www.epiuselabs.com/object-sync?hsLang=en) - [Rapidly refresh or copy SAP systems ](https://www.epiuselabs.com/data-sync-manager-product-suite?hsLang=en) #### Maximize your SAP HCM Systems - [Analyze HR data in real time](https://www.epiuselabs.com/query-manager?hsLang=en) - [Let users create SAP HR reports](https://www.epiuselabs.com/query-manager?hsLang=en) - [Manage HR data variances](https://www.epiuselabs.com/variance-monitor?hsLang=en) - [Test your HCM system with real data](https://www.epiuselabs.com/data-sync-manager-for-hcm?hsLang=en) - [Simplify your HCM cloud migration](https://www.epiuselabs.com/prism?hsLang=en) - [Create professional communications](https://www.epiuselabs.com/document-builder?hsLang=en) #### Simplify your SAP Security & Compliance - [Manage your SAP data privacy, security and risk](https://www.epiuselabs.com/manage-your-sap-data-privacy-security-and-risk?hsLang=en) - [Simplify data scrambling and masking](https://www.epiuselabs.com/data-secure?hsLang=en) - [Comply with data privacy legislation](https://www.epiuselabs.com/data-privacy-gdpr-suite?hsLang=en) #### Tools & Knowledge Resources - [Events and webinars](https://www.epiuselabs.com/events-and-webinars?hsLang=en) - [Ebooks and ultimate guides](https://www.epiuselabs.com/useful-sap-downloads?hsLang=en) - [Latest blogs](https://www.epiuselabs.com/blogs?hsLang=en) - [Client success stories](https://www.epiuselabs.com/view-success-stories?hsLang=en) - [Find a partner](https://www.epiuselabs.com/partners?hsLang=en) - [Subscribe to receive communication from EPI-USE Labs](https://www.epiuselabs.com/subscribe-to-communication?hsLang=en) [Get Support](https://www.epiuselabs.com/product-support?hsLang=en) [![eul_logo_w_white](https://www.epiuselabs.com/hs-fs/hubfs/Logo/eul_logo_w_white.png?width=282&name=eul_logo_w_white.png)](https://www.epiuselabs.com/?hsLang=en) © 2026 EPI-USE Labs Trafford House, 11th Floor, Chester Road, Stretford, Manchester, United Kingdom, M32 0RS    •[Other Office Locations](https://www.epiuselabs.com/office-locations?hsLang=en)   [Privacy Policy](https://www.epiuselabs.com/privacy-policy?hsLang=en) [Cookie Policy](https://www.epiuselabs.com/cookie-policy?hsLang=en) [Disclaimer](https://www.epiuselabs.com/disclaimer?hsLang=en) [Copyright](https://www.epiuselabs.com/copyright?hsLang=en) [Security Certifications](https://www.epiuselabs.com/information-security-certifications?hsLang=en) [CCPA Compliance](https://www.epiuselabs.com/dont-sell-my-personal-information?hsLang=en)