A step-by-step DPIA with a screening checklist, risk matrix, mitigation plan and sign-off – suitable for new systems, AI tools, monitoring and other high-risk processing.
Data protection & GDPR
Data Protection Impact Assessment (DPIA)
About this document
A template for assessing and reducing the data protection risks of a project or processing activity before it starts. Article 35 of the UK GDPR makes a DPIA mandatory where processing is likely to result in a high risk to individuals; it is also good practice for any significant new use of personal data. The template takes you from screening through to risks, measures, sign-off and review.
The document is laid out in the sections below. Each one comes with a plain-English guidance note explaining what it does and what to change.
Our templates are professionally structured starting points for UK businesses, not legal advice. For anything complex, unusual or high-value, have your final version checked by a solicitor.
Included in the pack
Data protection & GDPR
for every document in this category
Editable Microsoft Word files
Guidance notes in every document
Written for UK businesses
Download and keep
Need more than one category?
Documents All-Access gives you every category for 12 months for £295.
Compare options →Need it tailored?
We can adapt any template to your business, or write a document from scratch.
Talk to us →
