Skip to content

1. Project Overview

2. Initial Screening

2.1 Project Description

2.2 Mandatory DPIA Triggers

3. Data Processing Assessment

3.1 Data Inventory

Data CategoryPurposeLegal BasisRetention PeriodSourceSpecial Category?Actions

3.2 AI-Specific Data Considerations

4. Risk Assessment

4.1 Risk to Individual Rights

RiskLikelihood (1-3)Impact (1-3)ControlsResidual RiskActions
Discriminatory outcomes
Incorrect automated decisions
Privacy invasion
Loss of individual autonomy
Data inaccuracy propagation

4.2 Technical and Security Measures

5. Sign-off

5.1 Approval