PrivacyBuilt / Guided task
Prepare a DPIA
Screen planned processing, map its impacts and assemble a defensible assessment record.
01 / Prepare
Bring the right context
- Processing purpose, data flows, systems and accountable owner.
- Affected people, data categories, scale and planned changes.
- Existing controls, alternatives and relevant stakeholder input.
Use descriptions and evidence references; do not put personal data, credentials or confidential source material into public tools.
02 / Review
Use the tools with judgement
DPIA triage
3 minutesStart with screening. Its risk band is orientation, not a full DPIA or legal determination.
Open DPIA triagePrivacy programme planner
4 minutesPlace assessment actions and ownership into a wider implementation plan.
Open Privacy programme planner03 / Learn
Build the reasoning behind the review
Intermediate · 5 hours · Free training
GDPR Operational Practitioner
Move from GDPR awareness to defensible day-to-day implementation across data use, rights, assessments, vendors, transfers and incident response.
View courseIntermediate · 4 hours · Free training
Practical Privacy Program Implementation
Learn how to create data inventories, processing records, assessments, policies, request workflows, retention processes and measurable privacy controls.
View course04 / Act
Take a working record into your team
A prepared assessment record describing necessity, risks to people, controls and unresolved residual risk.
Download task checklist (.md)Markdown text file · No email required · Adapt to your context
Supporting templates and guidance
Before you close the task
- Document necessity, proportionality and potential harms to people.
- Assess controls and residual risk using a consistent method.
- Seek specialist review, required consultation or escalation before proceeding where relevant law requires it.