Overview | Data Protection Impact Assessment (DPIA)
The General Data Protection Regulation (GDPR) determines that conducting Data Protection Impact Assessments (DPIA) is mandatory pre-requisite in a variety of cases where personal data is processed in a way that is likely to result in a high risk to the rights and freedoms of individuals. A Data Protection Impact Assessment (DPIA) as a Service is a workshop-based consulting service facilitated by our experienced privacy specialist.
Process
DPIA is usually carried out as a process, which includes the following steps:
- Planning – Defining the scope and target of assessment
- Data gathering – Collecting data about the chosen target
- Reporting – Delivery of final report
- Camera surveillance
- Clinical research
- Employee healthcare
- Pension fund
Results
The goal of a Data Protection Impact Assessment (DPIA) is to:
- Identify & prioritise risks to the rights of the data subjects
- Compose an extensive compliance analysis against the GDPR & other relevant legislation
- Define controls to mitigate risks
- Demonstrate compliance
Benefits
By conducting a Data Protection Impact Assessment as a Service, an organisation will receive the following benefits:
- A systematic description of all the processing activities
- Estimation whether data processing activities are necessary and proportionate
- A high-quality DPIA done with the assistance of PV’s privacy specialist
- Implement risk-based approach
- Customised and tested baseline criteria specifically designed to meet the requirements of the GDPR
- A final report, which includes an executive summary, prioritised risks and an action plan to mitigate risks
Other Assessment Services
We offer Privacy Impact Assessment (PIA) as a Service, which is a workshop based consulting service conducted by our privacy specialist. Also, we offer PIA as a software solution, see our Privacy Impact Assessment tool. See also our other privacy services.
To learn more interesting insights, read our blog about best practices in privacy.