Where your data travels

Personal Data Flow Mapping

Knowing what personal data you collect is the easy part. The hard part is knowing where it goes afterwards - and whether you could find every copy if someone asked you to delete it.

Most businesses can name their systems. Almost none can trace one person's record through all of them - the inbox it was forwarded to, the spreadsheet it was exported into, the laptop it was downloaded onto, the vendor it was shared with, the backup that still holds it.

Same law. Different data flows. Different fixes.

Where data mapping fits

Four steps, in order. Each one answers a question the next one depends on.

1
Discover
What personal data does your business hold?
Data Discovery
2
Map
Where does it travel, and where do you lose control of it?
You are here
3
Assess
How ready are your controls, scored against your sector?
Industry Assessment
4
Publish
Turn it into a privacy notice you can actually put on your site.
Notice Generator

Start here · Free · No email

Not sure what personal data you hold?

Map it in ~3 minutes across 276 business types, then come back for the full assessment.

Personal Data Discovery

Available maps

Each map is a reference model of a typical business in that sector - not a scan of your systems. Free, no email required.

Live

Recruitment Agencies

Follow one person's record through 10 stages and 11 outside parties - and see the 7 points where control breaks.

24places their data lives

10stages in the journey

23external transfers

7control breaks

Explore the Recruitment Agencies map

Coming next

These sectors have a free readiness assessment today, and a data flow map on the way. Every sector below links to its assessment in the meantime.

Next step · Free · Preview without email

Need a DPDPA-ready privacy notice?

Generate a tailored Notice Pack — full notice, mini-notices, consent text and a rights block — from a few plain questions.

Notice Generator

Legal baseline: DPDP Rules, 2025 notified on 14 November 2025, with phased commencement.

Each map is a reference model of a typical business in that sector, not a scan of your systems. This page is for educational purposes and does not constitute legal advice.