The most effective means of mitigating the risk of lost or stolen personal data is not to hold the data in the first place. A data controller should always know what personal data they hold, where it ...