To be GDPR compliant, maintaining a data map is not mandated. However, a data map is heavily depended upon in for other GDPR compliance activities like maintaining an accurate ROPA, risk detection, and processing privacy instances.