A data map is exactly what it sounds like; it is a way to document the personal data in your organisation so that you understand it better. It clarifies what information you hold and where. There is a legal obligation to document certain processing activities in Records of Processing Activities (RoPAs) unless you fall under one of the exceptions outlined in Article 30 GDPR.
The resources below will assist you in your data mapping process.
- Excel template
- Video Tutorial
- E-book: “First Steps in Data Mapping”
