Data mapping

Data mapping

Data mapping (finding out what personal data your organisation processes) is often cited as one of the first tasks to tackle in a data protection compliance plan.

Assimilated Regulation (EU) 2016/679, the UK General Data Protection Regulation (UK GDPR) requires data controllers and processors to have a written record of data processing activities and the records must be made available to the supervisory authority on request.

Data mapping can be an enormous and time-consuming task. Despite the challenges, understanding and documenting the purposes of processing, the processing that takes place and the data involved provides a great basis for UK GDPR compliance.

To view the latest version of this document and thousands of others like it, sign-in with LexisNexis or register for a free trial.

TAKE A FREE TRIAL

Latest Practice Compliance News

FCDO announces sanctions against Russian GRU units and officers for cyber attacks

The Foreign, Commonwealth and Development Office (FCDO) has imposed sanctions on three units of Russia's Main Intelligence Directorate (GRU) and 18 military intelligence officers. The measures target units responsible for cyber operations against UK infrastructure and the 2022 Mariupol Theatre bombing. The sanctions package includes restrictions on GRU Unit 26165, which conducted reconnaissance for missile strikes, and officers linked to the 2018 Salisbury poisonings. Additional sanctions target three leaders of 'African Initiative' for conducting Russian-backed disinformation campaigns in West Africa.

OFSI publishes updated guidance and reporting forms

OFSI has updated its Reporting information to OFSI- what to do guidance with new reporting forms and updated links which are set out in the guidance.

HM Treasury publishes 2025 NRA of Money Laundering and Terrorist Financing

HM Treasury has published its 2025 National Risk Assessment (NRA) of Money Laundering and Terrorist Financing. The report highlights that the UK’s open, globally connected economy—while a strength—also makes it vulnerable to abuse by criminals and terrorists. Key threats include fraud, cybercrime, drug trafficking, tax evasion and the misuse of cryptoassets, property and corporate structures. The report emphasizes the growing complexity of money laundering typologies, including trade-based laundering, informal value transfer systems and the use of professional enablers. Terrorist financing threats are also evolving, with funds often raised through legitimate means and transferred via digital platforms or informal networks.

Government responds to 2024 MLR consultation

HM Treasury (HMT) has published the government’s response to the 2024 consultation on the Money Laundering Regulations (MLRs), detailing changes that will be made to the MLRs to close loopholes, clarify requirements and ensure customer due diligence is targeted at high-risk activity. A draft Statutory Instrument will be published for technical feedback in due course, and laid before Parliament later in 2025 if parliamentary time allows. The government says other issues will be addressed through guidance, in collaboration with supervisors, to ensure a consistent, risk-based approach.

View Practice Compliance by content type :

News