Data Protection Impact Assessment

The General Data Protection Regulation (GDPR) requires conducting a Data Protection Impact Assessment (DPIA) in certain cases, particularly in the following situations:

• Systematic and comprehensive decisions about individuals based on automated processing of personal data, such as profiling
• Large-scale processing of special personal or criminal data
• Systematic and large-scale monitoring of publicly accessible spaces

Additionally, your customers may ask questions about your privacy compliance that can be answered by conducting a DPIA. Conducting a DPIA provides insight into the privacy risks of your business process, service, or product. A DPIA can also provide insight into the risks inherent in the reuse of data. By conducting a DPIA, you can take measures to reduce privacy risks.

Do you need a DPIA?

Do you need help drafting a DPIA? Or do you doubt whether a DPIA is mandatory? We would be happy to help. Conducting a DPIA guarantees a clear picture of the privacy risks of data processing within your organisation. Considerati has extensive experience in conducting DPIAs in various sectors, including the business community and government. We have our own DPIA model based on European standards, but we are also experienced in using various other models, including the Data Protection Impact Assessment for Government Departments test model.