A data inventory is a structured, maintained record of the categories, locations, and flows of data - particularly personal data - that an organisation collects, processes, and stores. It underpins compliance with data protection regimes such as CCPA and GDPR by allowing an organisation to demonstrate what data it holds, why it holds it, and where it resides when responding to access, deletion, or portability requests. Maintaining an accurate data inventory is a prerequisite for exercising rights such as the right to be forgotten.