Data Protection Impact Assessment (DPIA)

Are you starting a new project, creating or changing a process, using existing information for a new purpose,  or implementing a new system whereby any personal information will be processed? If yes, please complete the Initial Data Protection Risk Assessment (IDPRA) form and send to dpaofficer@tendringdc.gov.uk.

Following submission, a member of the information governance team will review the form and be in touch with you to provide a risk score and advice on any further action needed.

Depending on your score, a full Data Protection Impact Assessment may be required.

What is a Data Protection Impact Assessment (DPIA)?

A Data Protection Impact Assessment (DPIA) is an integral component of a 'Privacy by design' approach to any personal data processing activity. 'Privacy by design' is an essential tool in minimising data privacy risks.

The UK Regulator - the Information Commissioner's Office(ICO) - encourages organisations to ensure that privacy and data protection isa key consideration at the early stages of any processing of personal data, and also throughout its lifecycle.

A DPIA is a structured approach to identifying the privacy risks associated with the processing of personal data and for implementing appropriate controls to manage any such risks.

A DPIA should be completed for any processing that involves personal data or any other activity that could impact the privacy of individuals. Some examples are:

·        Building a new IT system that stores or accesses personal data

·        Implementing any surveillance technology in a building, such as a CCTV system

·        Creating and publishing surveys that collect and process personal data

·        Developing policies or strategies that have privacy implications

·        Using existing personal information for a different purpose

A DPIA should be completed for any new project, but also for any changes to existing systems/processes/purposes and contract renewals where there is a data processing element.

For further advice please contact the Data Protection Officer:

Email: dpaofficer@tendringdc.gov.uk

Tel: 01255 68 6060

Further details regarding DPIAs can be found on the Information Commissioner's website at the following link –

https://ico.org.uk/for-organisations/uk-gdpr-guidance-and-resources/accountability-and-governance/data-protection-impact-assessments-dpias/