News

AI-enabled Information Governance and Discovery Supports Critical Government Functions

Government agencies operate in environments where information integrity, accessibility, and governance are fundamental to public trust, regulatory compliance, and the delivery of critical services. With rapidly growing volumes of digital and legacy content, agencies must balance transparency and discoverability with privacy, security, and legislative obligations. Informotion partnered with the Department to implement an AI‑enabled information governance and discovery capability using EncompaaS and Microsoft Azure technologies. The solution was designed to operate at enterprise scale, discover and govern information in place, strengthen compliance with the Archives Act 1983 and Whole‑of‑Government frameworks, and establish a trusted foundation for future AI‑driven government services.

5.05.26

Customer Background

The State Government Department (the Department) recognised that traditional, siloed approaches to records and information management were no longer sufficient. Increasing regulatory scrutiny, rising Right to Information (RTI) and inquiry demands, and limited enterprise‑wide visibility prompted the Department to seek a modern, intelligence‑led approach to information governance.

The Department plays a central role within State Government, supporting executive decision‑making, whole‑of‑government coordination, and sensitive policy and administrative functions. As a lead agency, it manages high‑risk, high‑value information across multiple platforms, repositories, and formats.

The Challenge

Over time, several challenges became increasingly pronounced.

Increasing compliance and inquiry pressure
The Department was subject to strict legislative and policy obligations, including the Archives Act 1983, RTI legislation, the Protective Security Policy Framework (PSPF), and the State Government Information Management Framework. Responding to audits, inquiries, and commissions required rapid, defensible discovery of information across many systems—often under significant time pressure.

Fragmented information landscape
Information was fragmented across Content Manager, Microsoft 365 services (SharePoint, Teams, Exchange, OneDrive), file shares, and legacy repositories. This limited visibility, increased compliance and privacy risk, and made it difficult to quantify the Department’s information assets and liabilities.

Manual and resource-intensive processes
Records classification, retention, legal holds, and disposal relied heavily on manual intervention by information management specialists. These resource‑intensive processes increased operational overhead and introduced risk in high‑stakes scenarios such as RTI responses, litigation, and commissions of inquiry.

Limited insight into information risk
The Department also lacked consolidated insight into redundant, obsolete, and trivial (ROT) information, duplication, ownership, and lifecycle status—restricting its ability to reduce risk, optimise storage, and plan strategically.

Addressing these challenges required more than a technology solution. It demanded a coordinated uplift in governance capability, transparency, and organisational confidence in information.

Project Scope

The initial phase of the project was designed to meet the requirements of a Commission of Inquiry into a sensitive matter. The Commission mandated comprehensive discovery, classification, and ethical management of large volumes of structured and unstructured content across multiple systems.

Informotion deployed the EncompaaS platform to connect disparate repositories and uncover historical and contemporary information relevant to the inquiry. Using optical character recognition, machine learning, and Azure Cognitive Services, including GPT‑based capability, EncompaaS enabled The Department to rapidly identify and contextualise information regardless of format or location.

Following the successful delivery of Phase 1, Informotion worked with The Department to establish a sustainable, enterprise‑wide approach that aligned to Whole‑of‑Government policy, legislative requirements, and their long‑term information management strategy.

A key principle was a manage-in-place governance model—governing information where it is created and used rather than forcing business users into a single system. EncompaaS discovered and governed information across existing repositories while preserving source‑system security, business context, and user workflows.

The platform enabled secure enterprise discovery and eDiscovery capabilities, supporting RTI requests, audits, and future inquiries through AI‑driven indexing and permission‑based search. AI and Machine learning‑based automated classification aligned information to approved retention schedules and disposal authorities, significantly reducing reliance on manual recordkeeping.

Centralised policies and dashboards provided transparency across information volumes, growth trends, lifecycle status, duplication, and access patterns. Throughout the engagement, Informotion worked collaboratively with the Department’s Information Management, ICT, and governance teams to ensure capability uplift and long‑term sustainability.

Successful Outcomes and Value Delivered

The program delivered measurable outcomes across compliance, operational efficiency, and strategic readiness. Phase 1 yielded exceptional results in addressing the requirements of the Commission of Inquiry. The EncompaaS solution enabled the Department to discover, analyse, and deliver large volumes of information required by the Commission well within mandated timeframes. The depth of contextual insight allowed the scope of requests to be refined, significantly reducing irrelevant content and enabling the Commission to reach findings and recommendations more efficiently.

Beyond the inquiry, the Department achieved broader, lasting value.

Compliance and risk management were strengthened through improved alignment with legislative and policy obligations, faster and more defensible responses to RTI requests, and clear auditability across information lifecycles.

Enterprise‑wide visibility was established through secure discovery and AI‑enabled search across electronic and digitised content, providing a clearer understanding of information assets and associated risk.

Administrative overhead was reduced through automated classification and lifecycle management, enabling scalable governance without increasing resource burden.

Executive oversight and decision‑making were improved through consolidated reporting on ROT, duplication, ownership, and growth trends, increasing confidence in the integrity, availability, and defensibility of information.

Most importantly, The Department established a modern information governance capability that supports transparency, accountability, and the delivery of critical government services all while positioning The Department as a leader in enterprise‑scale information management.

Why This Matters

This initiative demonstrates how government agencies can modernise information governance without compromising security, usability, or legislative compliance. By combining EncompaaS’ AI‑driven discovery and governance capabilities with Informotion’s public‑sector expertise, the Department has established a sustainable, future‑focused capability that directly supports the delivery of critical government functions.

Ready to modernise your information governance and discovery capability?

Contact Informotion to schedule a call and explore how we can help your organisation unlock trusted information to support critical government services.

Reach Out

Informotion Empowers Leading European Bank to Achieve GDPR Compliance

A major European bank, serving millions of customers and operating over 2,200 production systems, faced the daunting challenge of ensuring data privacy and compliance with the General Data Protection Regulation (GDPR). With both structured and unstructured customer data spread across numerous platforms, the bank needed a robust, strategic approach to information governance.

27.03.26

The Problem

The bank had no centralised way to control or enforce data policy across its primary and secondary systems. This lack of oversight made it impossible to manage the full customer record lifecycle without imposing operational disruption or risking system outages. Despite significant investment, the bank struggled to delete data in a legally defensible manner across all systems, leaving it exposed to compliance risks and inefficiencies.

The Solution

Informotion was appointed as the strategic advisor for the bank’s global GDPR Records and Information Retention Management programme, chosen for its reputation and domain expertise. Acting as the senior supplier, Informotion led the design, development, and implementation of a comprehensive solution, collaborating with incumbent service providers and engaging stakeholders from Policy, Legal, and Business units.

Key elements of the solution included:

  • Mapping data assets, systems, and business processes to understand information flow and dependencies.
  • Orchestrating and automating the deletion of records in both primary and secondary systems, according to authorised disposal schedules.
  • Employing a blend of waterfall methodology for the overall programme and agile approaches for platform and “end of business relationship” workstreams.
  • Ensuring all actions were centrally managed, with full audit logging and reporting for system data destruction.

The Benefits

Centralised Compliance

Unified control over data retention and disposal across 2,200 systems.

Risk Reduction

Legally defensible deletion of data, minimising compliance and reputational risks.

Operational Efficiency

Automated processes reduced manual workload and the risk of system outages.

Auditability

Comprehensive audit logs and reporting for all data destruction activities.

Enterprise Scalability

Approach coordinated multiple teams across the enterprise and treated 70+ million records and 8+ billion of rows of data.

GDPR Compliance

Achieved GDPR compliance certification for 2200+ systems.

“The bank is undertaking a large & complex programme of works to deliver GDPR compliance across the organisation. Based on the expertise & reputation of our staff, the bank entrusted Informotion to lead development of a strategic solution.”

The Outcomes

The bank has successfully demonstrated a “One Bank One Team” approach to the project, coordinating multiple teams across business, technology and records management.

Initial project outcomes included the treatment of 70+ million records and 8+ billion rows of data and GDPR compliant certification across 2,200+ systems.

With Informotion’s help the bank has established a sustainable, auditable process for ongoing data retention and disposal to meet the continuing compliance requirements of the GDPR.

Addressing Privacy & Sensitive Data Risk at Scale for State Government Department

This large State Government organisation committed to robust information governance, partnered with Informotion and EncompaaS to address the growing challenge of identifying and managing personal and sensitive data across its digital estate. The proof of concept aimed to establish clear criteria for PII detection and leverage advanced dashboards to visualise data attributes, resulting in enhanced compliance and risk management. Early successes included rapid identification of high-risk data and actionable insights for remediation.

28.01.26

The Customer’s Story

The Department operates within the state government sector, managing large volumes of sensitive information. With increasing regulatory requirements and public expectations around privacy, the Department has prioritised data protection and compliance. Recent milestones include the adoption of modern data governance frameworks and investment in AI-driven solutions to automate risk detection and reporting.

The Challenge of PII Discovery

Before engaging Informotion, the Department faced significant challenges in locating and classifying PII within its vast repositories. Manual processes were time-consuming and prone to error, leaving gaps in compliance and increasing the risk of data breaches. The organisation sought a scalable, automated solution to discover PII, apply consistent criteria, and present findings in an accessible format for stakeholders.

Why Informotion Was Chosen

The Department selected Informotion for its expertise in information governance and proven track record with government clients. The decision was influenced by Informotion’s partnership with EncompaaS, whose platform offered advanced discovery capabilities and intuitive dashboards. After evaluating several vendors, the Department recognised Informotion’s ability to tailor solutions to complex regulatory environments and deliver measurable outcomes.

Informotion’s Role

Leading phase one of the project, Informotion collaborated with the Department to define PII criteria and configure EncompaaS for targeted discovery. The team prioritised transparency, accuracy, and user experience, ensuring dashboards provided clear visibility into data locations, types, and risk levels. Informotion facilitated workshops, supported technical integration, and provided ongoing guidance throughout the project.

Successful Outcomes

Phase one of the project conducted over an 8-day period scanned ~350,000 documents, uncovering 13,700 electronic documents assessed as high sensitivity. The items included banking, passport, credit card, tax file number and drivers licence details.

Automated discovery

Of personal, sensitive and PII data cross the Department’s repositories

Custom criteria

Established approximately 20 different criteria for PII identification, improving consistency and compliance

Dashboards

Enabled real-time visualisation of data attributes, supporting informed decision making

Reduced manual effort

And accelerated remediation of high-risk data

Enhanced Reporting

For regulatory audits and internal governnce

Sensitivity Risk Identified

By business unit to enable targeted remediation.

Would you like to learn how Informotion can help your organisation discover and manage personal and sensitive data?

Contact Us to schedule a call

Speak with our team about tailored data solutions.

Subscribe

Sign up to our Newsletter.

Contact

Australia
T - 1300 474 288

L12, 50 Carrington St,
Sydney NSW 2000.

United Kingdom
T - +44 2080 890 523

United Kingdom Office
Waterside
1650 Arlington Business Park
Theale Reading
Berkshire, RG7 4SA