Data protection impact assessment

Practice notes

Active bribery, passive bribery and bribing foreign public officials

The purpose of this Practice Note is to provide a general understanding of the offences under section 1, 2 and 6 of the Bribery Act 2010 (BA 2010). It...

Produced in partnership with Joanne Kane of Carmelite Chambers 12th Jan

Practice notes

High-risk third countries tracker

This Practice Note lists high-risk third countries identified by the Financial Action Task Force (FATF), HM Treasury and the European Commission as...

9th Nov

In-house

Most recent Data protection impact assessment content

Practice notes

Completing a DPIA on surveillance cameras

This Practice Note is aimed at in-house lawyers, privacy and compliance professionals in private commercial organisations. It explains why, when and...

9th Apr

Q&As

Is a DPIA required where I am under a legal obligation to process personal data?

Practice Note: Data protection impact assessments—DPIAs sets out when a DPIA is required.DPIA requiredA DPIA is compulsory in the case of:•a...

29th Mar

Precedents

Data protection impact assessment—DPIA

1Project overviewProject summary[Summarise the project, eg new IT system for storing and accessing personal data, or proposal to identify people in a...

29th Mar

Practice notes

Data protection impact assessments—DPIAs

A data protection impact assessment (DPIA) does what the name suggests—it’s a way of assessing the data protection impact of a particular project or...

29th Mar

Precedents

Privacy impact assessment

Please ensure that this Privacy impact assessment is sufficient for your needs—you may need to carry out a full Data protection impact assessment...

23rd Mar

Precedents

Privacy risk register

Please click for an Excel version of this register. The register consists of three tabs:•sample Privacy risk register—this has been populated with a...

28th Jan

Precedents

Data protection impact assessment—consultation feedback form

Introduction[Provide a brief introduction of the project to which the consultation relates, to include as required:][—a brief introduction to your...

21st Jan

Precedents

Data protection impact assessment—DPIA—surveillance cameras

1Project summaryProject name[Insert name]Project owner[Insert name(s)]Project summary[Summarise the project, eg new CCTV system for a car...

21st Jan

Precedents

Data protection impact assessment—DPIA—short form

1Identify the need for a DPIAExplain broadly what project aims to achieve and what type of processing it involves[Insert, eg you may find it helpful...

21st Jan

Precedents

Data protection impact assessment—DPIA—report

1Project overview[Insert an overview of the project, explaining why it necessary and how it will impact on privacy. Subject to commercial sensitivity,...

21st Jan

Precedents