← GlossaryPractice

DPIA

A Data Protection Impact Assessment — a structured assessment of privacy risks in a processing activity.

A Data Protection Impact Assessment (DPIA) evaluates the privacy risks of a processing activity and the measures to mitigate them. Significant Data Fiduciaries under the DPDPA may be required to conduct DPIAs. A good DPIA process is templated, scores risk, tracks mitigations, and ends in an accountable sign-off.

Related terms