GDPR Perspectives:

It’s long been a well-understood principle in the information security world that you can’t protect what you can’t find. With privacy considerations increasingly critical to how organizations collect and process data, it’s becoming clear that a similar principle applies to protecting the privacy of personal information; you can’t protect personal data it if you can’t first find it.

With the EU General Data Protection Regulation (GDPR) privacy regulation looming over the horizon, that aphorism has never been truer.