Privacy Policy Advice to Companies: Build a Data Map
How should privacy professionals employed by private companies keep up with how well their employers are complying with stated privacy policy? The answer according to one privacy lawyer is to build a data map. The data map would track what information comes into the company's computers and for what reason and monitor who has access to that information. It is believed that without that knowledge it is impossible for a company to know if it is in compliance with its own privacy policy.
The Privacy Lawyer: It's Time To Build A Data Map, Information Week, August 9, 2004