Sign in Subscribe

Topic

Data Protection Impact Assessment (DPIA) / Privacy Impact Assessment (PIA)

Data Protection & Privacy Impact Assessments cover structured processes for identifying, evaluating, and mitigating privacy and data protection risks before or during processing activities. This tag includes Data Protection Impact Assessments (DPIAs) under the GDPR and Privacy Impact Assessments (PIAs) under U.S. and other privacy laws, including requirements, risk analysis, documentation, consultation, and privacy-by-design practices.

Colorado Privacy Act Data Protection Assessments: Understanding the Requirements

Colorado's Privacy Act requires Data Protection Assessments before high-risk processing begins. Learn when a DPA is required, what it must include, how often it must be updated, the risks organizations should evaluate, and practical steps for building a compliant assessment framework.

What Is a Risk Assessment Under the CCPA?

The CCPA requires businesses to conduct risk assessments before engaging in certain high-risk processing activities. Learn when a risk assessment is required, what it must include, how it compares to a GDPR DPIA, and the key compliance obligations under California law.

The GDPR’s DPIA Requirement: Identifying, Assessing, and Mitigating High-Risk Processing

A practical guide to GDPR Data Protection Impact Assessments (DPIAs), explaining when they are required, the nine high-risk criteria, how to assess and mitigate risks, conduct a DPIA, document decisions, and determine when prior consultation is required.

Data Protection by Design and by Default Under the GDPR: What Article 25 Requires

Learn what data protection by design and by default means under Article 25 GDPR, including privacy-protective defaults, data minimization, risk-based safeguards, accountability, DPIAs, processor selection, and how organizations can build data protection into systems from the start.

From Privacy by Design to Data Protection by Design: Principles and Practical Implementation

Privacy by Design embeds privacy into products, services, and business practices from the start. Explore its seven foundational principles, how they shaped Data Protection by Design under the GDPR, and practical steps organizations can take to turn privacy principles into everyday practice.

What is the "Right to an Explanation" under the GDPR?

The GDPR gives individuals important rights when organizations rely on automated decision-making and profiling. Learn when Article 22 applies, the safeguards organizations must implement, and how individuals can challenge automated decisions.