Personal data inventory checklist
Use this to identify what personal data your business collects, where it lives, and who is responsible for it.
Record these fields
- Data category
- Whose data it is
- Purpose
- Collection point
- System or tool
- Internal owner
- Access roles
- Vendors or processors
- Retention period
- Deletion method
Make it operational
The inventory should reflect real workflows, not only official systems. Include exports, shared drives, offline spreadsheets, support inboxes, WhatsApp groups, and admin panels if they contain personal data.
Update the inventory when you add a new form, tool, vendor, product feature, campaign, or data export.