The audit.
WHY IT MATTERS
You cannot meet obligations about data you have not identified.
WHERE PERSONAL DATA ACCUMULATES
Your website: form submissions, orders, accounts
Your email Messaging conversations Your accounting records Spreadsheets and documents Backups Third-party services you use
THAT LAST ONE
Services holding data on your behalf: your shop platform, your mailing service, your booking system.
WHAT TO RECORD
What data you hold Where it is Why you have it Who can access it How long you keep it
WHAT YOU WILL FIND
Data collected years ago for a purpose that ended Data in places you forgot Data more extensive than necessary
WHAT TO DO ABOUT IT
Delete what you no longer need Secure what remains Record the rest
HOW OFTEN
Annually.
WHAT THIS ENABLES
Answering a request about someone's data Responding to an incident Demonstrating you take it seriously
