Ongoing data management is where compliance lives or dies. While compliance is often presented as an administrative burden with little opportunity for creating value for the corporation, it should not be so easily dismissed. Recognizing the inherent value of information, compliance is more than just following the law; compliance is really about implementing best practices. In this paper, we present a model to help IT management build a checklist of compliance tasks. This involves four processes: data inventory, compliance readiness assessment, data protection policies, and ongoing data management.