Changes to the Privacy Impact Assessment template

An updated Privacy Impact Assessment (PIA) template can now be found on AskHUE in the Resources and Forms section.

A Data Protection Impact Assessment (DPIA) – sometimes referred to as a Privacy Impact Assessment (PIA), is a risk assessment tool.  It is mandated by the GDPR to help establish IG implications at the start of a proposal, programme or project.

The changes are:

• A new question at Stage 1 to establish whether the system, service or process is already in place
• The instruction has been amended to make it clearer to the completer what they need to do next (this comes up once all of the Yes/No boxes have been completed)
• The Common Systems tab has also been updated to reflect 2019/20 ICO registrations and Toolkit submissions.

This template is for staff completing a PIA going forward, any already underway can continue with the old template.

There are also PIA workshops being held here by the IG Team on 22 July, 2 October and 9 January (2020). These are optional sessions to help staff that complete/potentially need to complete PIA paperwork.  See the Events calendar on AskHUE for more details.

If you have any questions please contact our IG Champion, Grainne Stephenson.