Data Inventory
What is Data Inventory?
A comprehensive catalog of all personal data collected, processed, and stored by an organization, including data categories, purposes, retention periods, and sharing practices.
Terms that appear alongside data inventory
Each of these is named in at least one of the same controls as data inventory. The number is how many controls name both.
- compliance 6 shared controls
- data protection 5 shared controls
- nist 5 shared controls
- privacy notice 4 shared controls
- governance 4 shared controls
- state privacy laws 4 shared controls
- risk assessment 4 shared controls
- gdpr 3 shared controls
Frameworks that govern data inventory
What the standards actually require on data inventory
Requirements naming data inventory across 6 standards, quoted from the control text.
Capture in a data inventory, for each dataset, the purpose, data owner, data type (personal or business), data fields, dataset and location/system; keep the inventory updated as new data types are collected.
ADMF-3.2 · Maintain a data inventory →Build and keep a data inventory driven by the data management process, covering sensitive data as a minimum. Review it at least yearly, starting with the sensitive data.
cis-controls-v8-1::3.2 · Establish and Maintain a Data Inventory →Discover and classify data across structured and unstructured stores, updating continuously.
ZTMM-DAT-1 · Data Inventory and Classification →A controller must establish, implement and maintain reasonable administrative, technical and physical data security practices protecting the confidentiality, integrity and accessibility of personal data, appropriate to the volume and nature of the data, includ...
minnesota-consumer-data-privacy-act::325M.16(2)(c) · 325M.16 subd. 2(c): data security practices and a data inventory →Keep a data inventory built on the enterprise data management process, covering sensitive data as a minimum. Refresh it at least yearly, giving sensitive data priority.
CIS-3.2 · Establish and Maintain a Data Inventory →Maintain an inventory of data holdings covering at least all sensitive and personal data.
CCM-DSP-03 · Data Inventory →Questions people ask about data inventory
What is Data Inventory?
Why is Data Inventory important for compliance?
Which compliance frameworks address Data Inventory?
Where can I learn more about Data Inventory?
See how Data Inventory applies across compliance frameworks
Our platform maps 1,016 frameworks with 316K cross-framework control mappings. Explore how this concept is addressed across standards.