Map activities, not information or data flows
You should map activities instead of information or data flows as a first step to complying with data protection laws (like the GDPR and the Protection of Personal Information Act (POPI Act)). Many of our clients are struggling with a similar issue when [...]