Data Protection Impact Assessments (DPIA) help to identify and minimise privacy risks which occur as a result of new projects, policies or changes to the way personal data is handled. They help to ensure that potential problems are identified as early as possible during a period of change so that addressing them is as simple and cost effective as possible.
A DPIA will help to ensure that data protection risks are minimised while allowing the aims of a project to be met whenever possible.
Data Protection risks can be a risk of damage or distress to individuals affected by a change in the way their personal data is managed. There will also be corporate risks associated with a change in data handling, for example financial and reputational impacts of a data breach.