The Information Commissioners Office and Data Security and Protection Toolkit have identified Data Protection Impact Assessments as a key tool in addressing confidentiality and privacy concerns.   

A Data Protection Impact Assessment is a process to help identify and minimise the data protection risks of a project.

We must do a Data Protection Impact Assessment for processing that is likely to result in a high risk to individuals.  This includes some specified types of processing e.g. special categories of personal data – health data. 

It is also good practice to do a Data Protection Impact Assessment for any other major project which requires the processing of personal data or if you are making a significant change to an existing process.

Please see below completed Data Protection Impact Assessments: