Data mapping may be the first step on the road to privacy compliance, but for some organizations it's a steep drop. The sheer volume of data being inventoried and the inherent limitations of technology solutions designed to help means that many companies or law firms are looking at maps with more than a few holes in them.