Quickly Determine if You Need to Conduct a DPIA

All UK organisations need to be GDPR compliant, and most will need to undertake a Data Protection Impact Assessment (DPIA), or at least answer the qualifying questions to find out if a DPIA is required.

Conducting a DPIA is a mandatory step for data processing that is likely to result in a high risk to the rights and freedoms of the data subjects.

Effectively a DPIA is a type of risk assessment; as it will assess how high-risk processing activities could impact data subjects.

Failure to adequately conduct a DPIA where required constitutes a breach under the EU General Data Protection Regulation (GDPR) leading to administrative fines of up to 2% of your organisation’s annual global turn over or 10 Million Euros (€10 million) whichever is higher.

Create your own user feedback survey