Baker McKenzie offers this guidance on conducting data protection impact assessments, including insight on what types of processing may be considered high risk, what’s necessary to include in a DPIA, and when supervisory authorities should be consulted.
Data Protection Impact Assessment under the GDPR
Related Stories
EU Member State DPIA Whitelists, Blacklists and Guidance
Data protection authorities of many EU member states have published draft lists of data processing activities that would trigger the need for a data protection impact assessment in that country.
The European Data Protection Board weighed in on the drafts, you can find its opinions here. And IAPP We...
Infographic: What triggers a DPIA under the GDPR?
Published: July 2018Click To View (PDF)Click To View (PNG)
The IAPP has created this infographic to help you determine what kinds of activities are more likely to trigger a mandatory data protection impact assessment under the EU General Data Protection Regulation. Print it out for a quick refere...
Template for Data Protection Impact Assessment (DPIA)
This template, published by Family Links Network, provides a list of questions related to data protection issues that should be considered by National Societies prior to conducting a DPIA.
Click To View (PDF)
...
ICO: Sample DPIA Template
This template, published by the U.K. Information Commissioner's Office, offers an example recording the process and outcomes of a DPIA. It is meant as a complement to the ICO's DPIA guidance and the Criteria for an acceptable DPIA set out in European guidelines on DPIAs....