Everton Selects SureCloud

Everton Football Club chooses SureCloud to
help meet its GDPR obligations

Vector (8)

The Challenge

Everton Football Club based in Liverpool is one of the 12 Founder Members of the Football League and spent more seasons in England’s top division than any other Club (115).


In December 2017, Everton Football Club was seeking an automated solution to manage data and GDPR compliance software.

The scale and diversity of the data handled by Everton’s Data Protection team is extensive. Information on over 32,000 season ticket Members, a database of over 600,000 registered fans, as well as details on players, agents, suppliers, employees, and individuals associated with the Club’s Academy, its official charity Everton in the Community and the Everton Free School, is all held and processed centrally, and much of this information is highly sensitive.


Everton Football Club requires extensive GDPR compliance software.

It’s time to look beyond
the horizon of GRC

The Solution

To help address this, the Club approached its long-standing risk mitigation advisor NCC Group to find a GDPR solution. NCC Group recommended the SureCloud GDPR Suite, delivered on the SureCloud platform.


After SureCloud had successfully demonstrated the ability to provide full visibility for management and automation of GDPR processes across the organization, Everton selected the cloud-based suite of solutions…

Find out more about Everton’s journey towards GDPR compliance by downloading the full case study below.

Everton reduced the time taken to document their processing activities and data protection impact assessments by 75%.


You too can complete you risk and compliance activities 3 times faster with SureCloud’s solutions rather than traditional spreadsheets.

To solve today’s GRC challenges,
you have to really get them
Vector (9)-1
ebook download image

The Result

In partnership with NCC Group, SureCloud worked closely with Everton to determine the data and systems they used and which third parties they shared information with.
This was an extensive task that involved working with various departments within the Club, but
the SureCloud GDPR Suite helped to streamline it.
“Each time you add an information asset, it means that a lot of the information is already in the system when you move on to mapping, and then to processing,” - said Ian Garratt, Data Protection Officer at Everton.
“Essentially, it got quicker and easier to crunch the numbers and populate the appropriate fields the more we used the platform.”

Now, all of Everton’s disparate data are mapped, risk-assessed and tracked in a single centralized system.
All changes and requests are automatically tracked so that activity records and data audits can be produced at the click of a button. 
"We are now tracking and recording every single data request in a centralized way.
With NCC Group’s support, SureCloud’s solution has brought a comprehensive clarity to our data processing that was impossible to achieve with manual spreadsheets.” - Ian Garratt, Data Protection Officer at Everton