There are the 5 key stages to a DPIA and we’ll cover the details for each stage in a new post on the subject.
Stage 1. Identify the need for the DPIA. The answers to the questions below will quickly justify the need for an assessment. Will the proposed project involve:
- collecting new personal data?
- confidential or sensitive personal data types?
- sharing personal data with new third parties?
- processing data for a new purpose?
- using new technology (possibly privacy intrusive)?
- significant decisions on or actions against individuals, or
- contacting individuals in a possibly intrusive manner?
Answering “YES” to any of the above means that a DPIA is appropriate. Not performing an assessment may have serious consequences so better be safe than sorry, remember the “4% of global turn-over fines” rule. There will be more on DPIAs to follow soon. – Mike Hutton
