A Data Protection Impact Assessment (DPIA) is a process designed to identify risks arising out of the processing of personal data in order to minimise these risks as far and as early as possible. When your organisation collects, stores, or uses personal data, the individuals whose data you are processing are exposed to risks, which can put your company at risk to penalty by the relevant regulatory body. DPIAs are important for negating risk, and for demonstrating compliance with the GDPR, CCPA and other privacy regulations.

In conducting the DPIA for your business I will:

☐ Assess the collection and flow of information collection;

☐ Assess the nature, scope, context and purposes of the processing.

☐ Review the data processing activities and identify any associated risks.

☐ Run checks that the processing is necessary for and proportionate to our purposes, that processing is otherwise compliant with data protection principles.

☐ Conduct a gap analysis

☐ Assess the likelihood and severity of any risks to individuals’ rights and interests.

☐ Identify measures we can put in place to eliminate or reduce high risks.