What is a DPIA?

What is a DPIA?

A Data Protection Impact Assessment (DPIA) is a tool used to identify any risks to personal data before it is collected or used. It can also be used to review how an organisation is already using personal data.

The process helps the council’s services identify ways to minimise the risks, and also promotes transparency and accountability. Services within the Council will complete a DPIA Decision Checklist prior to starting any project, which will indicate where a DPIA is required.

There are occasions, set out by the Data Protection legislation and Information Commissioner’s Office (ICO), where a DPIA is a legal requirement. You can find out more about this by visiting the ICO website.