Unfortunately, some terms in data protection are real tongue twisters. The Data Protection Impact Assessment (DPIA) is definitely one of them. But behind that long name lies a simple idea: The greater the potential risks to people’s rights and freedoms, the more closely the data processing should be scrutinised.
This is exactly what we would like to do together with you.
Companies are constantly refining their processes: new software is introduced, digital workflows are expanded, and AI applications are increasingly in use. What was not considered high risk yesterday may require a new assessment today.
That is why we have made reviewing data processing activities to determine whether a DPIA is required a current priority. We have already begun reaching out to clients for whom a DPIA may be required for the first time or for whom an existing DPIA should be reviewed and updated. We will continue this effort in the coming weeks.
Perhaps you also have a process in mind that would benefit from a closer review (e.g. due to the use of new AI features)? If so, please feel free to contact us. Together, we’ll assess whether action is needed—and what measures may be necessary.
By the way: We’ve also updated our Practical Guide to Data Protection Impact Assessments. There you’ll find more information on the topic. Our clients can download it directly from our client portal (an account is not needed): www.fox-on.info. Or just send us a quick message and we’ll be happy to send it to you.