← GlossaryPractice
DPIA
A Data Protection Impact Assessment — a structured assessment of privacy risks in a processing activity.
A Data Protection Impact Assessment (DPIA) evaluates the privacy risks of a processing activity and the measures to mitigate them. Significant Data Fiduciaries under the DPDPA may be required to conduct DPIAs. A good DPIA process is templated, scores risk, tracks mitigations, and ends in an accountable sign-off.