As the GDPR comes into effect, HR needs to know what data they hold, where they hold it and why they hold it
