As a first step, it becomes important for organizations to do a Data Mapping of the flows of personal data in the organization. Building these would enable a greater understanding of the organization