The first step that must be done before data mapping can proceed is to identify all processes in the organisation which involve the collection, usage, disclosure, storage or disposal of personal data.
These can then be entered by/under the respective department owners.
Should a process not be listed,
