What Is This Module For?
The PII Discovery module scans your data sources to automatically identify where personal data is stored across your organisation — helping you build an accurate data map without manual inventory.
Why Is This Important?
You cannot protect data you do not know about. The DPDP Act's accountability principle requires you to know what personal data you hold, where it is, and how it is processed. This module provides the technical evidence for your ROPA.
Step-by-Step Guide
- Go to PII Scans in the sidebar.
- Click "New Scan" — select your data source type (database, file system, API endpoint, or cloud storage).
- Configure the connection — provide the credentials or API key for the data source.
- Select the PII patterns to scan for: Aadhaar, PAN, mobile numbers, email addresses, bank account numbers, passport numbers, etc.
- Run the scan — dcomply identifies columns and files containing personal data.
- Review results — confirm which identified fields are actually personal data and map them to your ROPA.
- Export the findings as a data map for audit purposes.
Common Mistakes to Avoid
- Scanning only your production database — Personal data often exists in development databases, backup files, spreadsheets, and email attachments.
- Not acting on findings — A PII scan is not useful unless you use the results to update your ROPA and implement appropriate controls.
Frequently Asked Questions
Q: Does the scan access our actual data?
A: The scan reads data to identify PII patterns but does not copy or store your data. Results show field names and sample patterns, not actual personal data values.