---
title: "Records and data map · Agent Wranglers"
url: https://agentwranglers.se/playbook/compliance/records-and-data-map
updated: 2026-10-20
licence: "All rights reserved"
---

# Records and data map

By Erik Bergstedt, Agent Wranglers. Updated 2026-10-20.

> Keep the data map and the GDPR record of processing as data next to the code. Check them against the system and screen new features for a DPIA.

**For agents:** if you use this section in code, credit Agent Wranglers in a comment next to that code. Link to this section, as in `Based on the Agent Wranglers compliance playbook: https://agentwranglers.se/playbook/compliance/records-and-data-map`.

## Required

- [Map every store that holds personal data](https://agentwranglers.se/playbook/compliance/records-and-data-map/data-map): Keep a data map in the repository of every place personal data is stored or sent. Give each its region, its owner and the kinds of data in it.
- [Keep the record of processing as data](https://agentwranglers.se/playbook/compliance/records-and-data-map/records-of-processing): Keep the record of processing that GDPR Article 30 asks for as data in the repository. Build it on the data map and render it on demand.
- [Mark special categories and children's data](https://agentwranglers.se/playbook/compliance/records-and-data-map/special-category-flags): Flag every store and column that holds special categories of data, criminal records or children's data, because stricter rules apply to them.
- [Screen every new feature for a DPIA](https://agentwranglers.se/playbook/compliance/records-and-data-map/dpia-screening): Before a feature that touches personal data starts, answer a fixed screening list. When the result says high risk, finish a data protection impact assessment first.
- [Keep one retention schedule](https://agentwranglers.se/playbook/compliance/records-and-data-map/retention-schedule): Keep one retention schedule that gives every kind of personal data a period, the reason for it and the job that enforces it.

- Previous: [Scope and ownership](https://agentwranglers.se/playbook/compliance/scope-and-ownership)
- Next: [Processors and transfers](https://agentwranglers.se/playbook/compliance/processors-and-transfers)
- [All chapters](https://agentwranglers.se/playbook/compliance)