Data protection impact assessment

A data protection impact assessment (DPIA) does what the name suggests—it’s a way of assessing the data protection impact of a particular project or process on any affected individuals.

For tools and guidelines on conducting a DPIA, see Precedents:

1. •

   Data protection impact assessment—DPIA and Data protection impact assessment—DPIA—short form

2. •

   Data protection impact assessment—DPIA—report

3. •

   Data protection impact assessment—consultation form

4. •

   Data protection impact assessment—consultation feedback form

The ICO guidance on DPIAs can be found in two locations: UK GDPR guidance and resources, Accountability and governance, Guide to accountability and governance, Data protection impact assessments and UK GDPR guidance and resources, Accountability and governance, Data Protection Impact Assessments (DPIAs).