Customer Story
Jindal Steel Sohar (JSS)

Jindal Steel Sohar Strengthened Data Trust and PDPL Compliance

See How PUMA Solved It — Download the Case Study

Thank you! Your submission has been received!
Oops! Something went wrong while submitting the form.
Jindal Steel Sohar (JSS)

About

Jindal Steel Sohar (JSS)

Jindal Steel Sohar (JSS), part of the Jindal Group, is the largest privately owned integrated steel plant in the GCC region, based in Sohar, Oman. The company manufactures high-quality steel products and leverages advanced technologies to drive efficient and sustainable production. As operations expanded across 40 departments, ensuring secure, compliant, and well-governed enterprise data became a critical priority.

The Challenge

With a large workforce and multiple departments operating independently, JSS faced growing challenges in managing personal and sensitive data consistently. The absence of a unified data governance framework led to fragmented data ownership, manual and error-prone reporting, unregulated data-sharing channels, and increased regulatory risk. Meeting Oman’s Personal Data Protection Law (PDPL) requirements while maintaining trusted reporting and operational efficiency became increasingly complex

The Solution

To address these challenges, JSS implemented an enterprise-wide Data Governance Framework aligned with DAMA principles and PDPL requirements. The initiative standardized governance processes across all 40 departments, documenting 100% of processing activities through Records of Processing Activities (RoPA). Defined DSR workflows, breach response SOPs, consent and privacy notices, and interim governance templates ensured immediate compliance, while metadata and governance tools such as Informatica CDGC and Atlan were recommended for long-term automation. Departmental Data Champions were appointed, supported by structured, role-based training programs to embed governance into daily operations.

The Benefits

The initiative enabled JSS to achieve full PDPL compliance ahead of the regulatory deadline, eliminating compliance risk and potential penalties. Reporting errors and duplicate records were reduced by 30–40%, and confidential data was restricted to approved secure channels. With clearly defined ownership and standardized processes, trust in KPIs and dashboards improved significantly, supporting better strategic decisions. Ongoing training ensured over 95% of staff were equipped to uphold data governance and compliance standards, establishing a sustainable culture of data responsibility.