You Can’t Govern Data You Can’t Find
Maintain a living data map: what you collect, where it is stored, who you share it with, and how long you keep it. Update it whenever you launch a new product, add a vendor, or start a new tracking/analytics integration.
The Evidence Question to Ask Yourself: If a regulator asked tomorrow, could you show where personal data flows, who touches it, and how long you keep it?
