Data Flow Map

Introduction

The Data Flow Map provides a visual overview of how data flows within your organization. This tool clearly illustrates how data moves from its source to its endpoint through various steps and processes.

The Data Flow Map creates transparency over internal and external data processes and their associated risks by mapping data flows. It makes it easier to identify potential risks in data processing. The Data Flow Map is particularly valuable for audits, compliance requirements (such as GDPR or FADP), and ensuring compliance with data protection regulations throughout the organization.

The Data Flow Map includes the following elements:

• Information Sources: Information sources refer to the data subjects.
• Data Collection Points: Data Collection Points (DCP) document where the data you process enters the organization.
• Assets: All assets involved in the processing activities must be linked to the ROPA.
• Vendors: All external service providers that may process, store, or manage data on behalf of or with the organization. They are an essential element in the Data Flow Map as they highlight external data processing relationships.

Using the Data Flow Map Feature

Go to Manage and select Data Flow. Or go to the ROPA, click on a specific processing activity, and navigate to the Data Flow tab. Here, an overview of the elements linked to the processing activity is displayed.

On the map, you can draw the connections between the individual elements to show the relationships between information sources, data collection points, assets, and vendors. To do this, drag an Information Source over a Data Collection Point, then over an Asset, and drop it on a Vendor. All elements you connect in this way will be automatically linked. This also allows connections between similar elements, such as two assets. Please note that you must start each flow with the information source.

You can delete these connections by selecting an element and then clicking the x on the line.
Carefully review each connection between elements. If data flow connections are incomplete or incorrect, you can update or adjust them on the map anytime.

The platform lets you zoom in on specific connections or view the entire data flow network as an overview.

You can select a different processing activity in the search field and go directly to its Data Flow Map.