Skip to content
The SAVVI Information Governance Framework
Conducting a Data Protection Impact Assessment
A Data Protection Impact Assessment (DPIA) is a process designed to help systematically analyse, identify and minimise the data protection risks of high risk processing. It also helps to assess and demonstrate compliance with other data protection obligations.
A DPIA should lists the data that will be accessed and sets out the local Benefits, Risks, and Mitigation Measures.
Steps
Initial Data Protection Impact Assessment
Read the ICO guidance.
If you have a Data Protection Officer, they will support, or guide writing the DPIA
Using
Carry out risk mitigation actions
The DPIA may have identified a series of actions necessary to bring risk to an acceptable level. This must be carried out before processing data.
There is then a residual risk that should be monitored.
Unacceptable Risk
The DPIA may have highlighted high risk processing that cannot be promptly mitigated.
There are no rows in this table
Want to print your doc?
This is not the way.
This is not the way.
Try clicking the ⋯ next to your doc name or using a keyboard shortcut (
CtrlP
) instead.