This issue of Privacy Matters examines the flow of personal data. Creating a data map is a quick way to identify, understand and record what happens to any personal data you have. Data maps should be kept on file and should be refreshed regularly. A great way to begin the recording process is by (1) figuring out what personal data you process; (2) whose data it is; (3) how, where and why you got it in the first place; (4) what you do with that data and why you need it; (5) how long you keep the data; and (6) whether or not it is transferred outside of your organization and, if so, where and why it is transferred. It also provides a great recordkeeping resource for proving compliance. The infographic follows the flow of data, along with questions for creating a data map.