Checking and rechecking are also necessary, as an incorrect diagram can create serious errors. Examples of errors include forgetting to include a data flow or pointing an arrow in the wrong direction.

Currently, the General Data Protection Regulation (GDPR) requires organizations that process consumers’ personal information to complete privacy impact assessments and regular risk assessments ...