Many organizations do not know how to find, access or control personal data. For organizations with global operations, the risks are magnified.