Data Protection Impact Assessment
What is Data Protection Impact Assessment?
A systematic process for evaluating the potential privacy impact of a project or system that involves processing personal data, required under GDPR for high-risk processing.
Terms that appear alongside data protection impact assessment
Each of these is named in at least one of the same controls as data protection impact assessment. The number is how many controls name both.
- impact assessment 57 shared controls
- data protection 57 shared controls
- data protection impact assessment dpia 22 shared controls
- high risk processing 22 shared controls
- gdpr 18 shared controls
- data protection officer 16 shared controls
- privacy by design 14 shared controls
- records of processing activities 13 shared controls
Frameworks that govern data protection impact assessment
What the standards actually require on data protection impact assessment
Requirements naming data protection impact assessment across 6 standards, quoted from the control text.
Where a type of processing, in particular using new technologies and taking account of the nature, scope, context and purposes of the processing, is likely to result in a high risk to the rights and freedoms of natural persons, carry out an assessment of the i...
GDPR-Art.35 · Data protection impact assessment →Where monitoring, particularly with new technology, probably carries high risk, such as systematic and extensive automated evaluation with significant effects, the employer must assess its impact on data protection (a DPIA), and if the residual risk remains hi...
article-29-working-party-opinion-2-2017-on-data-processing-at-work-wp249::3.2.2 · 3.2.2 Data protection impact assessment for high-risk monitoring and prior consultation if residual risk stays high →Processing personal data by automated monitoring or decision-making systems is deemed likely to result in a high risk under GDPR Article 35(1), so a DPIA is always required;
eu-platform-work-directive-directive-2024-2831::8(1) · Article 8(1) Data protection impact assessment with the views of persons performing platform work →Section 25E (added by 2018 GDPR Implementation Act) establishes Data Protection Impact Assessment (DPIA) requirement for processing likely to result in high risk to rights and freedoms of natural persons.
HU-INFOTV-Governance-DPIA-Privacy-by-Design-Risk-Section-25E · HU Infotv Section 25E - Data Protection Impact Assessment + Privacy by Design + Risk + Section 25F Prior Consultation →Where processing is likely to result in a high risk to data subjects' rights and freedoms by its nature, scope, context and purposes, the controller or processor must assess its impact before processing, in particular for systematic and extensive automated eva...
mauritius-dpa::34 · Section 34: carry out a data protection impact assessment before high-risk processing →Before processing operations that by nature, scope, context or purpose may pose significant risks to data subjects' rights, the controller must assess their impact on data protection;
paraguay-law-no-7593-2025-on-personal-data-protection::14 · Article 14 Data protection impact assessment →Questions people ask about data protection impact assessment
What is Data Protection Impact Assessment?
Why is Data Protection Impact Assessment important for compliance?
Which compliance frameworks address Data Protection Impact Assessment?
Where can I learn more about Data Protection Impact Assessment?
See how Data Protection Impact Assessment applies across compliance frameworks
Our platform maps 1,016 frameworks with 316K cross-framework control mappings. Explore how this concept is addressed across standards.