1. Project Overview
2. Initial Screening
2.1 Project Description
2.2 Mandatory DPIA Triggers
3. Data Processing Assessment
3.1 Data Inventory
Data Category | Purpose | Legal Basis | Retention Period | Source | Special Category? | Actions |
---|---|---|---|---|---|---|
3.2 AI-Specific Data Considerations
4. Risk Assessment
4.1 Risk to Individual Rights
Risk | Likelihood (1-3) | Impact (1-3) | Controls | Residual Risk | Actions |
---|---|---|---|---|---|
Discriminatory outcomes | |||||
Incorrect automated decisions | |||||
Privacy invasion | |||||
Loss of individual autonomy | |||||
Data inaccuracy propagation |