Assurance
DPIA
A Data Protection Impact Assessment is an assessment method within broader assurance for processing that may create high privacy risk.
When it may apply
The need depends on the AI System's data, purpose, affected people, scale, jurisdiction, and processing context. Use the Governance Plan and qualified privacy judgment; the tool does not replace legal analysis.
Workflow
- 1Start the DPIA from the relevant Project.
- 2Complete the guided questions using AI System facts.
- 3Record risks, safeguards, consultation, and supporting evidence.
- 4Finalize the assessment and generate the available report.
- 5Link or save the result as evidence where the workflow supports it.