Personal Data Inventory and Mapping (Data Mapping)

Create a complete personal data inventory and mapping for [COMPANY NAME], operating in [INDUSTRY/SECTOR], with [NUMBER] employees and [NUMBER] clients/patients.\\\\\\\\n\\\\\\\\n**Business areas to map:**\\\\\\\\n[LIST: HR, Marketing, Sales, Finance, IT, Legal, Customer Service, etc.]\\\\\\\\n\\\\\\\\n**For each area, document:**\\\\\\\\n\\\\\\\\n1) **Processing Record** (template for each operation):\\\\\\\\n   - Unique processing identifier\\\\\\\\n   - Responsible area and point of contact\\\\\\\\n   - Description of processing activity\\\\\\\\n   - Categories of data subjects (customers, employees, suppliers, minors)\\\\\\\\n   - Categories of personal data collected\\\\\\\\n   - Sensitive data: [YES/NO — Art. 5, II]\\\\\\\\n   - Data of minors: [YES/NO — Art. 14]\\\\\\\\n   - Legal basis (Art. 7 or 11): specific justification\\\\\\\\n   - Specific and legitimate purpose\\\\\\\\n   - Collection method (form, contract, automated)\\\\\\\\n   - Storage: system, location, format\\\\\\\\n   - Retention period and disposal criteria\\\\\\\\n   - Sharing: internal (which areas) and external (which third parties)\\\\\\\\n   - International transfer: [YES/NO — mechanism per Art. 33]\\\\\\\\n   - Security measures applied\\\\\\\\n\\\\\\\\n2) **Data Flow Map** (for the 5 most critical processing activities):\\\\\\\\n   - Diagram: collection → processing → storage → sharing → disposal\\\\\\\\n   - Systems involved at each stage\\\\\\\\n   - Identified vulnerability points\\\\\\\\n\\\\\\\\n3) **Legal Basis Matrix**:\\\\\\\\n   | Processing | Legal Basis | Justification | Risk if Invalid |\\\\\\\\n   - Prioritizing processing activities that depend on consent\\\\\\\\n\\\\\\\\n4) **Gap Analysis**:\\\\\\\\n   - Processing activities without defined legal basis\\\\\\\\n   - Data collected without clear purpose (necessity principle)\\\\\\\\n   - Undefined retention periods\\\\\\\\n   - Sharing arrangements not formalized in contracts\\\\\\\\n   - Sensitive data without additional security measures\\\\\\\\n\\\\\\\\n5) **Compliance Action Plan**:\\\\\\\\n   - Corrective actions by priority (high/medium/low)\\\\\\\\n   - Responsible party and deadline for each action\\\\\\\\n   - Estimated investment\\\\\\\\n\\\\\\\\n6) **Record of Processing Activities Template** (Art. 37, LGPD):\\\\\\\\n   - Spreadsheet/system for ongoing inventory maintenance\\\\\\\\n   - Update process: triggers and frequency\\\\\\\\n\\\\\\\\nBase this on LGPD (Arts. 5, 6, 7, 11, 14, 33, 37 and 46) and ANPD guidance.