Data Protection Impact Assessment (DPIA) To Do's

Be legally confident before you sign. A Legal Pro can review your document to make sure it's correct and complete. It's FREE with a Rocket Lawyer membership. 

Need any amendments?

Transferring personal data outside of the UK? Processing data for or sending data to public bodies? Processing data for a project that's not well defined?

Your document might need altering to meet your needs. Your Legal Pro can help you work out whether you need amendments when they conduct your review. You can use our bespoke legal drafting service to make amendments.

It's important to do everything necessary to make your document legal and complete. You need to: 

1. Check

2. Sign off medium or high level risks

3. Publish

4. Implement your DPIA during processing

5. Store  

For more details on each step, use the DPIA's Make it Legal Checklist:

Not sure your business is fully compliant with data protection law? Need help checking policies, contracts, or retention practices?

Use our GDPR compliance service:

If you're processing special category 'sensitive' personal data, you'll also need an APD. 

Use our APD document and FAQs: 

Do you know how to comply with data protection law? Know what counts as personal data? And how it can it be used?

It's important to be informed! 

Learn the fundamentals of data protection compliance in Section 3 of our free SME Legal Handbook:

You can also learn more from our free legal guides. Guides relevant to your DPIA include:  

1. Processing high-risk personal data and DPIAs

2. Data protection officers (DPOs)

3. Compliance for DPIAs