Data Mapping

Data mapping is the process of documenting how personal or sensitive data is collected, used, stored, shared, and transferred throughout an organization.

A data map may identify systems, business processes, vendors, data categories, purposes, recipients, locations, and retention periods.

Data mapping supports activities such as RoPA management, privacy assessments, data subject requests, vendor reviews, and cross-border transfer assessments.

Because systems and processing activities continually change, organizations increasingly use continuous discovery and monitoring to keep data maps aligned with the actual environment.