DPIA needs to be conducted where a processing is likely to result in a high risk to the rights and freedoms of natural persons.
We recommend conducting a DPIA every time you are planning to deploy a news personal data process – HR software, GPS systems or CRM database.
In Grant Thornton, we can help you to understand when DPIA needs to be conducted, what is high risk processing and help in conducting the DPIA.
Data protection impact assessment (DPIA) is a part of our wider business risk services risk assessment product portfolio. We have developed a DPIA model based on the guidance of various data protection agencies in Europe.