Abstract: Technologies related to constructing a data flow graph are described herein, where the data flow graph indicates that personal data is passed from a first computer-executable module of an organization computing system to a second computer-executable module of the organization computing system. The data flow graph is constructed based upon static analysis data pertaining to source code of the organization computing system; the data flow graph is further constructed based upon infrastructure data that provides runtime information for the organization computing system.