Know Your Data - Map the 5 W's
The GDPR will “force companies to scrutinise how they process and handle customer data” (Tony Pepper, Egress Software Technologies)
The requirements of enhanced fair and transparent processing, robust information security, records of processing activities and extended, stronger, rights require an in-depth knowledge of what personal data is processed and why.
Data protection is “an afterthought no longer” (Claire Milne, Appleby Global)
Businesses should map the Why? Who? What? When? Where? for the personal data being processed.
Part 1 of that toolkit: "Know Your Data: Mapping the 5 W's", and the editable "Mapping Pages", should assist businesses without the need for in-depth knowledge of GDPR.
Businesses should start to review and analyse:
- The personal data being processed
- Ask what actually happens across the business – consult both senior management and front line staff about how personal data is obtained and used
- The retention of personal data (including archives)