Data MonstersA field guide

The bestiary · The Compliance Wraith

The Compliance Wraith avatar

Specimen · catalogued monster

The Compliance Wraith

Appears at audit time asking where the personal data lives

0Data teams haunted

14 of 20On the leaderboard

Cold, patient and impeccably dressed, it drifts through the corridors carrying a clipboard that never runs out of questions. It is not cruel, merely thorough, and it can smell an untracked copy of customer data from three floors away.

Symptoms

  • Nobody knows where personal data lives
  • Slow subject access and deletion requests
  • No evidence of who accessed what
  • Audit preparation means weeks of spreadsheets
  • New rules: GDPR, EU AI Act, DORA

Weakness

Automated discovery and classification of sensitive data, access policies enforced in the platform, and evidence on tap, so an audit becomes a report rather than a séance.

Overheard in the corridor

  • “The auditors are in next week.”
  • “Do we even know where we store customer data?”
  • “Legal wants an answer by Friday.”
  • “We'll need to prove that, not just say it.”