You should also consult with individuals and other stakeholders throughout this process. Even if there is no specific indication of likely high risk, it is good practice to do a... read more →
On 01 January, there will not be any significant change to the UK data protection regime, or to the criteria that compel DPIAs. The EU’s General Data Protection Regulation (GDPR)... read more →
☐ attached any relevant additional documents we reference in our DPIA, e.g. ☐ identified all relevant risks to individuals’ rights and freedoms, assessed their likelihood and severity, and detailed all... read more →
Mitigations can include technical safeguards such as encryption or access controls and organizational steps such as staff training or overall project design choices. An example would be a bank’s algorithm... read more →