[{"data":1,"prerenderedAt":-1},["ShallowReactive",2],{"detail-sidebar-cat-1-en-105":3,"doc-seo-307415-105":53,"doc-detail-307415-en":127},{"code":4,"msg":5,"data":6},0,"success",[7,14,19,24,29,34,39,44,49],{"id":8,"doc_module":9,"doc_module_name":10,"category_name":11,"show_sort_weight":12,"slug":13},11,1,"Template","Presentations",90,"presentations",{"id":15,"doc_module":9,"doc_module_name":10,"category_name":16,"show_sort_weight":17,"slug":18},12,"Resumes",80,"resumes",{"id":20,"doc_module":9,"doc_module_name":10,"category_name":21,"show_sort_weight":22,"slug":23},14,"Invoices",70,"invoices",{"id":25,"doc_module":9,"doc_module_name":10,"category_name":26,"show_sort_weight":27,"slug":28},15,"Posters",60,"posters",{"id":30,"doc_module":9,"doc_module_name":10,"category_name":31,"show_sort_weight":32,"slug":33},16,"Social Media",50,"social-media",{"id":35,"doc_module":9,"doc_module_name":10,"category_name":36,"show_sort_weight":37,"slug":38},17,"Forms",40,"forms",{"id":40,"doc_module":9,"doc_module_name":10,"category_name":41,"show_sort_weight":42,"slug":43},18,"Letters",30,"letters",{"id":45,"doc_module":9,"doc_module_name":10,"category_name":46,"show_sort_weight":47,"slug":48},21,"Paper Templates",5,"papers-templates",{"id":50,"doc_module":9,"doc_module_name":10,"category_name":51,"show_sort_weight":4,"slug":52},158,"General","general-158",{"code":4,"msg":54,"data":55},"ok",{"site_id":56,"language":57,"slug":58,"title":59,"keywords":60,"description":61,"schema_data":62,"social_meta":120,"head_meta":122,"extra_data":124,"updated_unix":126},105,"en","dpia-template-20180209-v03-record-and-outcome","DPIA template 20180209 - v0.3 - record and outcome","","DPIA template for recording a Data Protection Impact Assessment process and its outcomes for major projects involving personal data or significant changes to existing processing. Covers seven steps: identifying the need, describing data processing and context, purposes, consultation, necessity and proportionality controls, assessing and rating risks by likelihood and severity, and selecting measures to reduce risks. Includes sign-off and documentation of approvals, residual risks, DPO advice, consultation review, comments, and ongoing review responsibilities.",{"@graph":63,"@context":119},[64,80,102],{"@type":65,"itemListElement":66},"BreadcrumbList",[67,71,74,77],{"item":68,"name":69,"@type":70,"position":9},"https://docshare.wps.com","Home","ListItem",{"item":72,"name":10,"@type":70,"position":73},"https://docshare.wps.com/template/",2,{"item":75,"name":36,"@type":70,"position":76},"https://docshare.wps.com/template/forms/",3,{"item":78,"name":59,"@type":70,"position":79},"https://docshare.wps.com/template/dpia-template-20180209-v03-record-and-outcome/307415/",4,{"url":78,"name":59,"@type":81,"image":82,"author":87,"headline":59,"publisher":90,"fileFormat":93,"inLanguage":57,"description":61,"dateModified":94,"datePublished":95,"encodingFormat":93,"isAccessibleForFree":96,"interactionStatistic":97},"DigitalDocument",{"url":83,"@type":84,"width":85,"height":86},"https://docshare.wps.com/thumbnails/dpia-template-20180209-v03-record-and-outcome/307415.png","ImageObject",442,249,{"name":88,"@type":89},"Oliver","Person",{"url":68,"name":91,"@type":92},"DocShare","Organization","application/pdf","2026-10-23","2026-09-19",true,{"@type":98,"interactionType":99,"userInteractionCount":101},"InteractionCounter",{"@type":100},"ViewAction",6,{"@type":103,"mainEntity":104},"FAQPage",[105,111,115],{"name":106,"@type":107,"acceptedAnswer":108},"When should this DPIA template be completed?","Question",{"text":109,"@type":110},"Complete it at the start of any major project that involves personal data, or when making a significant change to an existing process.","Answer",{"name":112,"@type":107,"acceptedAnswer":113},"What information is required in Step 2 to describe processing?",{"text":114,"@type":110},"It requires describing how data is collected, used, stored, and deleted, the data sources, sharing arrangements, data scope (including special category or criminal offence data), scale, retention, affected individuals, geography, context, expectations, vulnerable groups, novelty, technology context, public concerns, and any relevant codes of conduct.",{"name":116,"@type":107,"acceptedAnswer":117},"How are risks assessed and reduced in the template?",{"text":118,"@type":110},"Step 5 records risks by their source and nature, rating likelihood and severity and deriving an overall risk. Step 6 lists options to reduce or eliminate medium or high risks, the effect on risk, residual risk level, and whether measures are approved.","https://schema.org",{"og:url":78,"og:type":121,"og:title":59,"og:site_name":91,"og:description":61},"article",{"robots":123,"canonical":78},"index,follow",{"doc_id":125,"site_id":56},307415,1789848938,{"code":4,"msg":5,"data":128},{"doc_id":125,"user_id":129,"nickname":88,"user_avatar":130,"doc_module":9,"category_id":35,"category_name":36,"doc_title":59,"doc_description":61,"doc_content":131,"file_id":132,"file_url":133,"file_type":134,"file_size":135,"view_count":101,"is_deleted":4,"is_public":9,"is_downloadable":9,"audit_status":9,"page_count":136,"language":137,"language_code":57,"site_id":56,"html_lang":57,"table_of_contents":138,"faqs":139,"seo_title":140,"seo_description":61,"update_tm":126,"read_time":76},8796095461610,"https://ap-avatar.wpscdn.com/davatar_276721f389ce27ea32af1340a28f341c","Sample DPIA template  \nThis template is an example of how you can record your DPIA process and outcome. It follows the process set out in our DPIA guidance, and should be read alongside that guidance and the Criteria for an acceptable DPIA set out in European guidelines on DPIAs.  \nYou should start to fill out the template at the start of any major project involving the use of personal data, or if you are making a significant change to an existing process. The final outcomes should be integrated back into your project plan .  \nStep 1: Identify the need for a DPIA  \n\n| Explain broadly what project aims to achieve and what type of processing it involves. You may find it helpful to refer or link to other documents, such as a project proposal. Summarise why you identified the need for a DPIA. |\n| --- |\n|  |\n\nDPIA template 20180209  \nv0 .3 1  \nStep 2: Describe the processing  \n\n| Describe the nature of the processing: how will you collect, use, store and delete data? What is the source of the data? Will you be sharing data with anyone? You might find it useful to refer to a flow diagram or other way of describing data flows. What types of processing identified as likely high risk are involved? |\n| --- |\n|  |\n\n\n| Describe the scope of the processing: what is the nature of the data, and does it include special category or criminal offence data? How much data will you be collecting and using? How often? How long will you keep it? How many individuals are affected? What geographical area does it cover? |\n| --- |\n|  |\n\nDPIA template 20180209  \nv0 .3 2  \n\n| Describe the context of the processing: what is the nature of your relationship with the individuals? How much control will they have? Would they expect you to use their data in this way? Do they include children or other vulnerable groups? Are there prior concerns over this type of processing or security flaws? Is it novel in anyway? What is the current state of technology in this area? Are there any current issues of public concern that you should factor in? Are you signed up to any approved code of conduct or certification scheme (once any have been approved)? |\n| --- |\n|  |\n\n\n| Describe the purposes of the processing: what do you want to achieve? What is the intended effect on individuals? What are the benefits of the processing – for you, and more broadly? |\n| --- |\n|  |\n\nDPIA template 20180209  \nv0 .3 3  \nStep 3: Consultation process  \n\n| Consider how to consult with relevant stakeholders: describe when and how you will seek individuals’views – or justify why it’s not appropriate to do so. Who else do you need to involve within your organisation? Do you need to ask your processors to assist? Do you plan to consult information security experts, or anyother experts? |\n| --- |\n|  |\n\nStep 4: Assess necessity and proportionality  \n\n| Describe compliance and proportionality measures, in particular: what is your lawful basis for processing? Does the processing actually achieve your purpose? Is there another way to achieve the same outcome? How will you prevent function creep? How will you ensure data quality and data minimisation? What information will you give individuals? How will you help to support their rights? What measures do you take to ensure processors comply? How do you safeguard any international transfers? |\n| --- |\n|  |\n\nDPIA template 20180209  \nv0 .3 4  \nStep 5: Identify and assess risks  \n\n| Describe source of risk and nature of | Likelihood | Severity | Overall |\n| --- | --- | --- | --- |\n| potential impact on individuals. Include associated compliance and corporate risks as necessary. | of harm | of harm | risk |\n|  | Remote, possible or probable | Minimal, significant\u003Cbr>or severe | Low, medium\u003Cbr>or high |\n\nDPIA template 20180209  \nv0 .3 5  \nStep 6: Identify measures to reduce risk  \n\n| Identify additional measures you could take to reduce or eliminate risks identified as medium or high risk in step 5 |  |  |  |  |\n| --- | --- | --- | --- | --- |\n| Risk | Options to","cbCairT6b1ole6at","https://ap.wps.com/l/cbCairT6b1ole6at","pdf",80576,7,"English","# Step 1: Identify the need for a DPIA\n# Step 2: Describe the processing\n## Describe the nature of the processing\n## Describe the scope of the processing\n## Describe the context and relationship\n## Describe the purposes of the processing\n# Step 3: Consultation process\n# Step 4: Assess necessity and proportionality\n# Step 5: Identify and assess risks\n# Step 6: Identify measures to reduce risk\n# Step 7: Sign off and record outcomes","[{\"question\":\"When should this DPIA template be completed?\",\"answer\":\"Complete it at the start of any major project that involves personal data, or when making a significant change to an existing process.\"},{\"question\":\"What information is required in Step 2 to describe processing?\",\"answer\":\"It requires describing how data is collected, used, stored, and deleted, the data sources, sharing arrangements, data scope (including special category or criminal offence data), scale, retention, affected individuals, geography, context, expectations, vulnerable groups, novelty, technology context, public concerns, and any relevant codes of conduct.\"},{\"question\":\"How are risks assessed and reduced in the template?\",\"answer\":\"Step 5 records risks by their source and nature, rating likelihood and severity and deriving an overall risk. Step 6 lists options to reduce or eliminate medium or high risks, the effect on risk, residual risk level, and whether measures are approved.\"}]","DPIA template 20180209 - v0.3 - record and outcome | PDF"]