CompanyAssessments
Data Protection Impact Assessment (DPIA)
A Data Protection Impact Assessment (DPIA) identifies and reduces privacy risks when personal data is processed. Under the General Data Protection Regulation (GDPR), a DPIA is required when processing is likely to create a high risk to people's rights and freedoms. It should be completed before that processing starts.
Assessment history
| Phase | Date | Description |
|---|---|---|
| Assessment Phase | December 2023 | Evaluate the need for a DPIA based on new or significantly altered data processing activities. |
| Planning Phase | January 2024 | Outline the scope, objectives, and methodology of the DPIA, including stakeholder engagement plans. |
| Discovery Phase | February 2024 | Catalog and assess data processing activities, identifying the types of data collected, processed, and stored. |
| Start of Implementation | February 2024 | Implement measures to address and mitigate any identified privacy risks, enhancing data protection practices. |
| Assessment report | April 2024 | Finalize and document the DPIA findings, including risk assessment results and mitigation measures implemented. |
| Annual review | 2024 - now | Reviewed processing activities and privacy risks; no material changes identified. |
Status
The 2024 DPIA was completed and is reviewed annually. It is maintained within our internal compliance structure and is current.
Last reviewed: August 2026.