Tueoris created maps of personal data flows to support preparation for GDPR compliance for a US-based international air carrier. Data maps focused on flows within the airline’s internal network and to its considerable outsourced/third-party ecosystem in order to facilitate responses to data subject rights requests. Mapping exercise included the development of process workflows for data subject rights requests (intake, analysis and fulfilment), including communication of requests to in-scope third party processors and sub-processors.