1. Project Overview
2. Initial Screening
2.1 Project Description
2.2 Mandatory DPIA Triggers
3. Data Processing Assessment
3.1 Data Inventory
| Data Category | Purpose | Legal Basis | Retention Period | Source | Special Category? | Actions |
|---|---|---|---|---|---|---|
3.2 AI-Specific Data Considerations
4. Risk Assessment
4.1 Risk to Individual Rights
| Risk | Likelihood (1-3) | Impact (1-3) | Controls | Residual Risk | Actions |
|---|---|---|---|---|---|
| Discriminatory outcomes | |||||
| Incorrect automated decisions | |||||
| Privacy invasion | |||||
| Loss of individual autonomy | |||||
| Data inaccuracy propagation |