Data audit and register

Regular data audits to manage and mitigate risks will inform the data register.  This contains information on what data is held, where it is stored, how it is used, who is responsible and any further regulations or retention timescales that may be relevant.