Data mapping

Copyright © 2025 LexisNexis

Data mapping (finding out what personal data your organisation processes) is often cited as one of the first tasks to tackle in a data protection compliance plan.

Assimilated Regulation (EU) 2016/679, the UK General Data Protection Regulation (UK GDPR) requires data controllers and processors to have a written record of data processing activities and the records must be made available to the supervisory authority on request.

Data mapping can be an enormous and time-consuming task. Despite the challenges, understanding and documenting the purposes of processing, the processing that takes place and the data involved provides a great basis for UK GDPR compliance.

To view the latest version of this document and thousands of others like it, sign-in with LexisNexis or register for a free trial.

Existing user? Sign-in TAKE A FREE TRIAL
Powered by Lexis+®
Latest Risk & Compliance News

FCDO announces sanctions against Russian GRU units and officers for cyber attacks

The Foreign, Commonwealth and Development Office (FCDO) has imposed sanctions on three units of Russia's Main Intelligence Directorate (GRU) and 18 military intelligence officers. The measures target units responsible for cyber operations against UK infrastructure and the 2022 Mariupol Theatre bombing. The sanctions package includes restrictions on GRU Unit 26165, which conducted reconnaissance for missile strikes, and officers linked to the 2018 Salisbury poisonings. Additional sanctions target three leaders of 'African Initiative' for conducting Russian-backed disinformation campaigns in West Africa.

OFSI publishes updated guidance and reporting forms

OFSI has updated its Reporting information to OFSI- what to do guidance with new reporting forms and updated links which are set out in the guidance.

HM Treasury publishes 2025 NRA of Money Laundering and Terrorist Financing

HM Treasury has published its 2025 National Risk Assessment (NRA) of Money Laundering and Terrorist Financing. The report highlights that the UK’s open, globally connected economy—while a strength—also makes it vulnerable to abuse by criminals and terrorists. Key threats include fraud, cybercrime, drug trafficking, tax evasion and the misuse of cryptoassets, property and corporate structures. The report emphasizes the growing complexity of money laundering typologies, including trade-based laundering, informal value transfer systems and the use of professional enablers. Terrorist financing threats are also evolving, with funds often raised through legitimate means and transferred via digital platforms or informal networks.

Government responds to 2024 MLR consultation

HM Treasury (HMT) has published the government’s response to the 2024 consultation on the Money Laundering Regulations (MLRs), detailing changes that will be made to the MLRs to close loopholes, clarify requirements and ensure customer due diligence is targeted at high-risk activity. A draft Statutory Instrument will be published for technical feedback in due course, and laid before Parliament later in 2025 if parliamentary time allows. The government says other issues will be addressed through guidance, in collaboration with supervisors, to ensure a consistent, risk-based approach.

View Risk & Compliance by content type :  
News
Practice notes
Precedents
Q&As

Popular documents

Can I charge a fee for dealing with a data subject access request?

Can I charge a fee for dealing with a data subject access request?The General Data Protection Regulation (GDPR) provides for enhanced rights for data subjects including providing rights of rectification, erasure and restriction of processing, data portability, a right to object to processing and a

Can a limited company make a subject access request? Can a director of a limited company ask for

Can a limited company make a subject access request? Can a director of a limited company ask for recordings of calls with us? If yes, what personal data must we provide?This Q&A draws on the Information Commissioner’s Office’s (ICO’s) guidance on business-to-business marketing, which may or may

Priority between loss reliefs in loss making companies

Priority between loss reliefs in loss making companiesWhy does it matter?A company that is a member of a group and has incurred any of the types of losses available for surrender by way of group relief may, without any further rules, have more than one way in which to use the loss. There are a

Late payment penalties—inheritance tax

Late payment penalties—inheritance taxWhile interest often accrues on overdue tax, the late payment of certain taxes may also attract a penalty. For information on the interest accruing on overdue tax, see Practice Notes: IHT—payment deadlines on death—Interest on IHT and Interest on late paid
Can I charge a fee for dealing with a data subject access request?

Can I charge a fee for dealing with a data subject access request?

Can I charge a fee for dealing with a data subject access request?The General Data Protection Regulation (GDPR) provides for enhanced rights for data subjects including providing rights of rectification, erasure and restriction of processing, data portability, a right to object to processing and a

Can a limited company make a subject access request? Can a director of a limited company ask for

Can a limited company make a subject access request? Can a director of a limited company ask for

Can a limited company make a subject access request? Can a director of a limited company ask for recordings of calls with us? If yes, what personal data must we provide?This Q&A draws on the Information Commissioner’s Office’s (ICO’s) guidance on business-to-business marketing, which may or may

Priority between loss reliefs in loss making companies

Priority between loss reliefs in loss making companies

Priority between loss reliefs in loss making companiesWhy does it matter?A company that is a member of a group and has incurred any of the types of losses available for surrender by way of group relief may, without any further rules, have more than one way in which to use the loss. There are a

Late payment penalties—inheritance tax

Late payment penalties—inheritance tax

Late payment penalties—inheritance taxWhile interest often accrues on overdue tax, the late payment of certain taxes may also attract a penalty. For information on the interest accruing on overdue tax, see Practice Notes: IHT—payment deadlines on death—Interest on IHT and Interest on late paid