Conducting a Data Protection Impact Assessment

Our Fieldfisher Technology and Data team discuss the different ways to approach completing a Data Protection Impact Assessment. The team considers: how best to prepare for one; the various DPIA templates available; how to adapt a template; any sector or user specific requirements; whether a light touch DPIA is a possibility or a DPIA can be repurposed; and key takeaways.

Remember a DPIA is not a document to be filed away. It needs to be monitored, actively reviewed and updated as necessary. Equally it has a multitude of purposes and provides an organisation with an excellent opportunity to simultaneously audit a variety of their data protection processes.
 

With thanks to Trainee Solicitor, Kacey-Ann Keating for their contribution.