DataTerminology.comNEW
A comprehensive record of datasets, systems, owners, and data flows across an organization.
DESCRIPTION
A data inventory catalogs datasets, systems, owners, and interfaces to provide visibility and control. It enables compliance (e.g., GDPR), supports DPIAs, and simplifies access requests and risk assessments. Inventories often include business purpose, sensitivity, retention, and lineage for each item. They underpin governance, cataloging, and incident response by identifying where data lives and how it moves. Effective inventories are maintained continuously and integrated with catalogs and CMDBs.
ALTERNATIVE DEFINITIONS
Project Open Data
A data inventory is a comprehensive listing of an agency’s data assets, including datasets that can be made available to the public.
Focuses on public-sector inventories and open data publication readiness.
NIST
Organizations should maintain a data inventory and mapping to understand processing and systems, enabling risk management and privacy controls.
Emphasizes the role of inventories in privacy risk management.
UK ICO
Data mapping involves finding out what personal data you have, where it is, and how it flows through your organisation.
Links inventory and mapping to GDPR accountability obligations.
RELATED TERMS
Data Map Asset Inventory Metadata Lineage System Registry Data Protection Impact Assessment Data Exploration Privacy Program
COMPETING TERMS
Records of Processing Activities Data Discovery Platform
KNOWLEDGE AREAS
Metadata Management Data Governance Data Privacy & Compliance Data Management
TARGET AUDIENCE
Data Steward Data Privacy Officer IT Auditor Chief Data Officer Data Governance Manager IT Manager
EXTERNAL SOURCES
- Wikipedia - Information governance
- Project Open Data - US federal data inventory guidance
- UK ICO - GDPR guidance on mapping
- NIST - Privacy Framework reference
TOP QUESTIONS
What is a Data Inventory?
It’s a comprehensive list of datasets, systems, owners, and data flows, enabling visibility, compliance, and governance.
Category: Definition
Why maintain a Data Inventory?
It supports GDPR accountability, risk assessments, incident response, and data access management.
Category: Relevancy
What should a Data Inventory capture?
Business purpose, sensitivity, retention, owners, lineage, systems, interfaces, and legal basis where applicable.
Category: Requirements
How is a Data Inventory updated?
Automate discovery, integrate with catalogs and CMDBs, and assign stewardship for ongoing maintenance.
Category: Management
What mistakes are common in Data Inventories?
Stale entries, missing lineage, inconsistent classifications, and ignoring shadow IT sources.
Category: Mistakes
What are risks of an incomplete Data Inventory?
Compliance failures, data breaches going undetected, and poor incident response readiness.
Category: Risks
What competes with Data Inventories?
Records of Processing Activities and catalogs overlap; combining them improves coverage.
Category: Alternatives
How to start a Data Inventory?
Identify key systems, run automated scans, standardize attributes, and validate with owners.
Category: HowTo
How does a Data Inventory support DPIAs?
It reveals data types, flows, and systems, enabling impact assessments and control selection.
Category: Example