The most efficient and comprehensive way to achieve this is by way of a data protection audit - which is also, in fact, now a legal requirement pursuant to the Law.