Is there a Template for a DPIA?

When certain processing of personal data poses a high risk to the rights and freedoms of individuals, a controller is required under Article 35 of The General Data Protection Regulation (AGV/GDPR) required to conduct what is known as a data protection impact assessment (DIA), or data protection impact assessment (DPIA) to be conducted. This is especially true when new technologies are used.

With a DPIA, an analysis is done prior to any data processing to identify the risks so that measures can then be taken to minimize those risks.

The Flemish Supervisory Commission (VTC)., which monitors AVG compliance among Flemish government agencies, has a template for conducting an EIO/DPIA elaborated along with the necessary explanation about this.

How can we assist you as a lawyer?

We advise government agencies and companies on whether or not they should conduct an EIO/DPIA for certain processing operations.

We provide assistance to government agencies and companies in actually conducting an EIO/DPIA.