What is a data protection impact assessment?
A data protection impact assessment (DPIA) is like a risk assessment. It helps you to identify and minimise data protection risks in order to comply with your legal obligations and meet individuals’ expectations of privacy.
Use a DPIA to identify and fix problems with new data processing activities at an early stage.
Do not carry out the assessment yourself. Your role as the data protection officer (DPO) is to independently consult, check compliance with data protection law, and make recommendations.
When to conduct one
Your school must carry out a DPIA before you begin any type of processing that's likely to result in a high risk to the rights and freedoms of individuals.
If you're unsure whether