The development of these tools comes just in time for more regulation, such as the Minnesota Consumer Data Privacy Act, which passed in May and becomes the first law to explicitly state the need for organizations to maintain a data inventory. California’s recently passed Delete Act similarly increases the need for organizations to conduct effective data mapping so they will be able to remove data relating to individuals when those people request to opt out of data broker lists. Next, companies should evaluate the results of data mapping as part of their periodic risk assessment process, and determine what adjustments need to be made to how data is stored, training of employees, and determination of whether the data stored at vendors is properly protected.