We can't say it better ourselves...
"Make sure that all data and rules we use digitally are traceable to laws and policies and where we can't do that, there is a policy missing OR we are processing something we shouldn't."
&
"It is important that we get the data explicitly traceable to laws and policies."