Data Protection Impact Assessments (DPIAs)

A Data Protection Impact Assessment (or DPIA) is a tool used by an organisation, or organisations, when planning a project that uses its service users’ data in a way that is different to the way the data has been used in the past.

It helps the organisation to design a system of managing this data to minimise risk to the data itself, and to help the organisation make sure they are acting within data protection regulations and following the law.

For thoroughness, organisations should ideally do a DPIA for any major project that involves the processing of service users’ data, even if the data isn’t being used in a new way.

If you would like to see the DPIAs connected to data processing at Albany Surgery, these are available on request. Please send an email to “enquiriesatalbany.L83034@nhs.net“, or come into the surgery, and we will arrange this.

For more information on DPIAs, please click here for the Information Commissioner’s Office (ICO) guide to DPIAs.