A data protection plan is an internal document for an organization explaining what it intends to do to keep data safe and secure.