Data Protection Impact Assessment

Data Protection Impact Assessments (DPIAs) evaluate your project or process to ensure compliance with data protection standards and protect your orgnanisation from compliance gaps.

In some cases, DPIAs are legally required where data processing is likely to result in a high risk to the individual.

High risk processes will often include:

• Sensitive data
• Large scale processing
• Novel technology
• Children’s data
• Employee monitoring
• Denial of service
• Combining and matching data

DPIAs are essential for high-risk processes. However, while not all processes will fall under the scope of presenting a high risk to the individual, DPIAs remain good practice for any project or process to limit an oganisation’s risk exposure and to improve process documentation and accountability.

Trilateral offers threshold assessments to determine whether it is necessary for your organisations to carry out a DPIA on the proposed system or processing activity.

If this assessment determines you need a DPIA, we recommend these are carried out as early as possible to avoid unforeseen delays and additional costs.

Step by step

Trilateral fosters a strong data protection and data governance culture within your organisation, enabling you to understand short- and medium-term risks so as to manage them proactively. Our training shares knowledge, best practices and tools to help your employees become confident in dealing with data independently and responsibly.