Obtaining control of personal data within your organization