A process to identify and manage the data protection risks associated with a project or change.

A requirement for the General Data Protection Regulation (GDPR), a Data Protection Impact Assessment (DPIA) is a process that helps organisations identify and minimise risks that result from data processing. DPIAs are usually undertaken when introducing new data processing processes, systems, or technologies.