Data Mapping

Data mapping consists in creating an inventory of all personal data processing performed by an organisation.

Strongly recommended in any GDPR programme, data mapping allows you to measure your organisation’s level of compliance.

A data map is a key starting point for obtaining a global view – processing activity, purposes, controller, sensitive data, data security, legal basis, transfers, service providers & subcontractors, etc. — of the personal data processing conducted by your organisation.

It gives employees better access to — and a better understanding of — the personal data being processed, along with its sources. It is an essential tool for ensuring proper protection of personal data and privacy.

Data protection authorities generally recommend data mapping to measure the level of GDPR compliance using, among other things, the information contained in the record of processing activities.

Data mapping allows compliance monitoring, and contributes to enriching the record of processing activities, so that organisations – and the Data Protection Officer, or DPO — can draw up action plans dedicated to maintaining compliance.