The Office of the Australian Information Commissioner published a suggested 10-step process for privacy impact assessments. “A PIA identifies how a project can have an impact on individuals’ privacy and makes recommendations for managing, minimizing or eliminating privacy impacts,” the OAIC said. Conducting a threshold assessment; planning the scope of the PIA, its timeframe and budget; identifying key stakeholders; and considering options for mitigating privacy risks are among the 10 steps.