Data Protection Impact Assessment Template
1 Project overview
Project summary | [Summarise the project, eg new IT system for storing and accessing personal data, or proposal to identify people in a particular group or demographic to predict their buying needs] |
Processing purposes | [Insert the purposes of the processing, eg Improve the quality and accuracy of employee personal data and implement an improved process for deleting data that is no longer required] |
Lawful ground for processing | [Insert lawful ground. Where the organisation intends to rely on legitimate interests as the lawful ground for processing, describe those legitimate interests and also confirm that a legitimate interest assessment has been undertaken] |
2 Identify the need for a DPIA
2.1 Project aims and benefits
What does the project aim to achieve? | [State what the project aims to achieve] |
What are the anticipated benefits to the [company OR firm], individuals and/or other parties? | [Describe anticipated benefits] |
2.2 Preliminary screening
Question | Answer/comment |
|---|---|
Does the project involve one or more of the following: —systematic and extensive evaluation of personal aspects relating to natural persons based on automated processing (including profiling) on which decisions are based that produce legal effects for or similarly significantly affect a data subject |