Assessments
An assessment is the written record of why a processing activity, or an AI system, is lawful and what reduces its risks. The GDPR requires a data protection impact assessment for high-risk processing; California's regulations add risk assessments for certain processing; the EU AI Act adds a fundamental rights impact assessment for some deployers.
Guides in this section
DPIA vs PIA: what each is, when you need one, and what goes in it
The GDPR's data protection impact assessment, the general privacy impact assessment and California's new risk assessments: triggers, content and dates.
Last reviewed
How to run a DPIA in practice, with a checklist
A data protection impact assessment step by step: screening, describing the processing, necessity, risks, measures, consultation, decision and review.
Last reviewed