A data inventory, also known as a records of authority, is a comprehensive list or catalog of personal data held by an organization, including details about the data’s location, purpose, and processing activities. Data inventories are a key requirement under various privacy regulations, such as the GDPR, CCPA, and CPRA, as they help organizations understand their data landscape, identify potential risks, and ensure compliance with data protection obligations.