← Back to glossary
🧪

Privacy Impact Assessment (PIA/DPIA)

Privacy

Data Minimization Privacy by Design Data Protection Officer (DPO) Risk Assessment

Formal assessment to identify and mitigate privacy risks and document decisions.

Definition

A privacy impact assessment (often called DPIA in some regimes) evaluates data flows, purposes, necessity, proportionality, risks to individuals, and mitigations such as minimization, access control, and encryption.

In plain English Formal assessment to identify and mitigate privacy risks and document decisions.

Why this matters

Why it matters: It operationalizes privacy-by-design and supports compliance evidence.

Example

Example: DPIA documents risk scenarios and requires changes (shorter retention, reduced identifiers, stronger consent).