Company Logo

<< Organisation Name >>

Data Protection Impact Assessment
Data Processing System: << Name >>
Assessment No:
Date of Assessment:
Assessor Name:
Data Processing System:

Parties Consulted With

List all the departments, managers, board members who have been consulted during this data protection impact
assessment.

Data Flow Process

Describe in detail the data flow process from collection, through processing to the final result.
Data Flow Diagram
Diagram the data flow of the data processing system.

Method(s) of Data Collection

Describe all methods of collecting the personal data being used in the data processing system.
Number of Data Subjects:

Types of Personal Data Processed

List all personal data being collected or processed. Where personal data is part of the special categories, indicate this.

Necessity for Collecting Personal Data

Describe why each item of personal data is collected and justify the reasons for its continued collection.
Privacy Issue Risk to Data Subjects
List each potential area of the data flow whereby In relation to the privacy issue listed in the previous
personal data could be subject to a breach. column, detail the risk a breach at this stage of the data
flow might pose to the data subject.
Risk Solution
List the risk derived from the previous Detail any mitigating solutions which
table. can reduce or remove the risk listed
in the previous column.
Result
List the result of applying the
solutions from the previous column,
did this solution, reduce or eliminate
risk?