Services

Data Mapping & Inventory

Document what personal data is used, why it is needed, where it goes and who is responsible.

Reviewed 18 September 2026 · Prahari DPO

When this work helps

Useful when information is spread across teams, spreadsheets, cloud tools and providers, or when an existing inventory no longer matches operations.

Scope and practical outputs

Map the agreed business activities from collection through sharing, retention and disposal. Assign an owner to maintain the inventory.

  • A personal-data inventory covering activities, people, purposes, systems and owners.
  • Data-flow maps showing recipients, locations, access and handovers.
  • A register of retention, deletion and other questions requiring confirmation.

What your team contributes

Provide process owners and system knowledge. Review the draft with the people doing the work; a central policy owner may not know every spreadsheet or manual export.

An example to discuss

Follow one order from checkout to payment, delivery, support and record disposal. Include the courier export and the support inbox, not just the main application.

Agree the boundaries

The inventory covers the agreed activities and information available for review. Completeness should be validated with process owners. Any jurisdiction-specific record requirements need their own review.

Common questions

How do we keep the inventory useful?

Assign an update owner and review it when systems, purposes, providers or retention arrangements change.

Can we reuse our global inventory?

Yes, after checking whether India activities, local systems and actual handovers are represented correctly.

Discuss the work you need

Agree the service, deliverables, responsibilities and fees before committing to an engagement.

Related reading

References

This page explains topics to scope and discuss. It does not establish applicability, certify compliance or confirm a paid engagement.

← Services