Data Protection Impact Assessment, or DPIA for short. Even the acronym can strike fear into the hearts of those struggling with data protection compliance. But those people are not alone some experts would probably agree that it's not their favourite thing to do either. Completing a DPIA can take a lot of thought, time and effort. But, try as you might, they cannot be avoided.
What is a DPIA for?
A lot of the angst can derive from a simple misunderstanding; a DPIA is a risk assessment but not primarily to the risks your organisation faces. It focuses on the risks to the people whose data you will be using. That said, there's also a need to consider the risks your organisation could face, for example if a breach occurs. Such risks could include reputation damage, regulatory fines and even loss of business, but these can arise out of not getting the first part right. While organisational risk is reasonably well understood, it's the privacy risks that often cause the most difficulty.
Don't get too worried. The beginning of the process is simply working out whether you need a DPIA at all. This can be decided through a number of screening questions which are in the GDPR itself and have been added to by supervisory authorities and the Article 29 Working Party, an EU advisory body now replaced by the European Data Protection Board. The screening questions are relatively straightforward at first glance but do require some thought. For example, the GDPR asks: Will the processing involve special categories of data on a large scale? Let's say your plans include processing some health data but is this large scale? Well, that depends. There is no official definition of large scale' but it can be understood by looking at what type of health data is in scope: either serious medical conditions or the last time you took a day off sick and why? Is it going to be a significant number of data subjects, such as in the millions? Or maybe not a large number but a relevant proportion such as over half of the town's residents?
Let's put this into context
At this point, and before it gets too confusing, we'd like to introduce you to Sam, the man (or woman) in the street. They're used in legal and statistical discussions to represent the person who sits at the top of the bell curve - average, ordinary, your everyday Joe (or Jill). Sam is the person whose personal data you're thinking of processing. For every screening question, ask yourself what would Sam think?
Sam doesn't have a problem with your use of the personal data you're thinking about using but might get upset if you used it to decide whether they should pay a higher insurance premium. They're happy for you to have that information as the reason for its use is understood and acceptable but would be horrified if a breach occurred and their friends and neighbours could read their information online.
If there's something you think Sam would be worried about, then it's probably time to look at the full DPIA. Identify the concern and what you can do to make Sam happy. It might be additional security controls to help prevent breaches, reducing the amount of sensitive data you need to use, restricting who can access it, or making it clear you'll delete it the minute you no longer need it. Whatever will make Sam smile again is what you need to put into place. Don't know a Sam? The DPIA process encourages you to consult with others including the data subjects themselves. There are plenty of Sams out there. Then there's only one piece of the puzzle missing, your Data Protection Officer, or on-call expert, will be able to guide Sam in making informed decisions as they know the law and, more importantly, have experience in what can and does go wrong.
Don't let the thought of a DPIA scare you, it's about making sure everything is thought through and no decisions you make will cause sleepless nights for your data subjects. No scary elephants needed.
Contact us to discuss DPIAs, DPOs or anything else you're concerned about.
lang: en_GB
Our Accreditations and Certifications
Most recent headlines
11/12/2025
Dalet, a leading provider of cloud-native, end-to-end media workflow solutions, ...
01/12/2025
L3Harris and PentenAmio formalise their teaming agreement at MilCIS 2025, streng...
01/12/2025
Artemis II is NASA's first crewed flight test of the Space Launch System rocket and Orion spacecraft. The crew, from left: Commander Reid Wiseman, Pilot Vic...
01/12/2025
IRVINE, Calif. Wooden Camera has introduced its new Accessory Collection for the Canon EOS C50. The new lineup includes a low-profile, gimbal-ready cage, expand...
01/12/2025
WASHINGTON The Federal Communications Commission has released a tentative agenda for its Dec. 18 Open Commission Meeting that will include a vote on a report an...
01/12/2025
In most years, a graph of annual local TV ad spending is about as predictable as an electrocardiogram of a reasonably healthy patient in a doctor's office. ...
01/12/2025
Many industries have seen big-ticket hardware turn into software. Switchers, though, demand a combination of real-time performance and sheer bandwidth that has ...
01/12/2025
GENEVA Shanghai will host the next quadrennial Radiocommunication Assembly (RA-27) and World Radiocommunication Conference (WRC-27), Oct. 11-Nov. 12, 2027. This...
01/12/2025
NEW YORK Just in time for Giving Tuesday tomorrow (Dec. 2), the Broadcasters Foundation of America is seeking out donations to help television and radio industr...
01/12/2025
STOCKHOLM, Sweden Net Insight CEO Crister Fritzson has informed the company's board that he will retire from the video transport and media cloud technology ...
01/12/2025
01 Dec 2025
Kyivstar and Ukrainian Ministry of Digital Transformation Select Go...
01/12/2025
The prequel to the global hit Sky Original mob crime saga, Gomorrah' is a s...
01/12/2025
Featuring Florence Welch, Red Hot Chilli Peppers' Flea, designer Bella Freud...
01/12/2025
Back to All News
A Down to Earth, All Too Relatable Hero: Cashero' Teaser ...
01/12/2025
In the rush to deliver content to every screen, many broadcasters overlook one of the most crucial steps in the workflow: format and frame rate conversion. Get ...
01/12/2025
Fox Corporation Chief Financial Officer Steve Tomsic to Participate in Upcoming ...
01/12/2025
Arvato Systems' Virtual Private Cloud (VPC) Receives BSI C5 Certification (T...
01/12/2025
Summary This short video gives you an summary of the changes in under two minutes.
--...
01/12/2025
As the festive season approaches, RT Supporting the Arts is proud to showcase a...
01/12/2025
Researchers worldwide rely on open-source technologies as the foundation of their work. To equip the community with the latest advancements in digital and physi...
01/12/2025
Festive specials of Christmas in Kilmainham presented by Marty Whelan, High Road Low Road, Callan Kicks the Year and Keys to My Life
Ring in the New Year with ...
01/12/2025
Architect and television presenter Hugh Wallace, best known to RT audiences as a long-serving judge on Home of the Year, has died at the age of 68.
In a state...
28/11/2025
Nadia Fall attends the 2025 Sundance Film Festival premiere of Brides at the Egyptian Theatre on January 24, 2025, in Park City, Utah. (Photo by Donyale West/...
28/11/2025
It's easy to ignore those little red update available badges. But when it ...
28/11/2025
WASHINGTON Federal Communications Commission has released a tentative agenda for the December Open Commission Meeting scheduled for Thursday, December 18, 2025 ...
28/11/2025
The Professional Fighters League is looking to super-serve fans of mixed martial...
28/11/2025
Fubo has released in beta on select Roku devices a new feature that lets users display up to four simultaneous streams at once....
28/11/2025
The WNBA playoffs and Week 4 of the NFL regular season highlight the list of live sports events airing on television this weekend....
28/11/2025
The 32nd class of honorees to the B+C Hall of Fame took to the stage at New York's Ziegfeld Ballroom on September 26 for a gala induction event. Click below...
28/11/2025
We hold in our hands the very last Next Text for Next TV, the weekly back-and-fo...
28/11/2025
DirecTV said it made a deal with EchoStar to buy EchoStar's video businesses, including satellite-TV provider Dish TV and virtual MVPD Sling TV, for $1 plus...
28/11/2025
The Broadcasting+Cable Hall of Fame, the premier industry event paying tribute to the influencers, innovators and shining lights of broadcast, cable and streami...
28/11/2025
Friday 28 November 2025
Sky Sports x Slawn drop limited-edition football jersey...
28/11/2025
Rohde & Schwarz shows resilience in a challenging environment, revenue exceeds t...
28/11/2025
Unwrapped: The Toy Show Appeal - airing this Sunday on RT One and RT Player- s...
27/11/2025
LONDON Vizrt has added several AI-driven advanced features offering improved speed, intelligence and accuracy in the newest version of its media asset managemen...
27/11/2025
Prime Video has launched AI-powered video season recaps in a beta version for select English-language Prime Original series in the U.S., a move Amazon is callin...
27/11/2025
Back to All News
Netflix's Raat Akeli Hai: The Bansal Murders Marks a Grand...
27/11/2025
27 Nov 2025
GSMA brings M360 Eurasia 2026 to Samarkand in partnership with VEON...
27/11/2025
Tahar Rahim and Izuka Hoyle star in the gripping six-part Sky Original from Acad...
27/11/2025
Thursday 27 November 2025
Sky Arts Reveals the Nation's Greatest Basslines - and Queen Reign Supreme
The UK's most iconic basslines have been revealed...
27/11/2025
Back to All News
Stranger Things 5': Prepare for One Last Adventure With O...
27/11/2025
The media industry has a paradox at its core. It's an industry built on light, color and imagination, yet behind the scenes, it's powered by one of the ...
27/11/2025
Rating reflects rating progress across areas including policies, diversity & inclusion, health & safety and Net Zero leadership
Winchester, UK, 27 November 202...
27/11/2025
What are the industry standards for Retail Media? Kathryn explains that certification is based on the IAB Europe Retail Media Measurement Standards and the IAB ...
27/11/2025
World champion boxer and Irish sporting icon Katie Taylor will be in studio this...
27/11/2025
Roblox, one of the world's most popular online gaming platforms for primary ...
27/11/2025
Black Friday is leveling up. Get ready to score one of the biggest deals of the season - 50% off the first three months of a new GeForce NOW Ultimate membership...
26/11/2025
SVG Sit-Down: Prime Video EP Mike Muriano Previews Massive Black Friday Slate Fe...
Data Protection Impact Assessment, or DPIA for short. Even the acronym can strike fear into the hearts of those struggling with data protection compliance. But those people are not alone some experts would probably agree that it's not their favourite thing to do either. Completing a DPIA can take a lot of thought, time and effort. But, try as you might, they cannot be avoided. 
