In preparation for CCPA, Tueoris conducted a data mapping exercise to document the flow of personal data within the commercial data infrastructure of an online vitamin retailer. Mapping included documenting the flow of data through internal systems and to third-party service providers. Mapping results were leveraged to create a personal data inventory; to support improvements to data security controls; and to identify opportunities to optimize data value and data use.