A data process involves the process of finding out where your organisation’s data is stored, how it is processed and whether it is compliant with data protection law. This process can be performed manually or electronically. For example, questionnaires on data holding might be distributed to relevant staff or data audit software that is executed to identify PII on servers or end-point devices. When performing a data audit, it is important to think about data broadly. For instance, you may have customer data but also employee and supplier data.