A Data Processing Inventory is a detailed view of how the data you hold is stored and processed, helping you achieve compliance with relevant regulatory regimes.
Organisations today hold large volumes of data in many forms and for many different purposes. This is both a source of opportunity and risk.
For this reason, many data privacy regimes require organisations keep detailed records of what personal data they hold and how it is being processed.
A Data Processing Inventory is a detailed record of all the personal information your organisation holds and processes, and the purposes for which it is processed.
A clear understanding of your personal data holdings – through a record such as a Data Processing Inventory – is a foundational component of any privacy or data governance program. It helps you ensure your data processing practices always align with privacy requirements.
Under data protection regulations, organisations are increasingly required to maintain detailed records of how data is being processed. These records may need to be made available to regulators.
elevenM will work with you to ensure your Data Processing Inventory requirements are appropriate for your organisation’s specific circumstances.
Below is a typical process we would follow to develop a Data Processing Inventory.
Data Processing Inventory can take many forms, eg. a spreadsheet or a database. Given the sensitivity of information and importance of this document, it should be stored in a secure manner regularly backed up.
We work with every organisation individually to tailor our work to your needs.