data protection laws – mapping your activities