A core requirement of both the GDPR and the similar California Consumer Privacy Act (CCPA) is the ability to demonstrate and prove that personal data is being ...