An inventory of the all data processing activity within an organisation, detailing the scope, legality, extent and nature of the processing.