Data Protection Impact Assessment
Also known as: Privacy Impact Assessment (PIA)
A systematic process used to identify, analyze, and mitigate privacy risks associated with data processing activities. It is typically required for high-risk projects to ensure that data protection safeguards are integrated into the system design from the start.
In practice
During a compliance audit, an assessor will review completed DPIA reports to verify that risk treatment plans were documented and implemented before a new technology or process was launched.