Foreword
Introduction
- Part I – How to Determine whether an Assessment is Needed
- Privacy and PIA Background information
Preparing for the PIA Screening process
The PIA screening process

Part II – Full-Scale Privacy Impact Assessment

Part III – Small-Scale Privacy Impact Assessment

Part IV– Privacy Law Compliance Checking

Privacy law compliance check
- Detailed Template: Privacy and Electronic Communications Regulations (Marketing)

Part V– Data Protection Act Compliance Checking

Data Protection Act compliance check
- Detailed Template: Data Protection Act

Part VI – Additional Information

Full-Scale PIA - Documentation phase

This is Phase 4 of the five-phase PIA process.

Privacy Impact Assessment is a process. The benefits to the organisation that conducts it arise mainly from that process, in the form of learning and adaptation, partly by the stakeholders, and partly by the organisation and the team responsible for the project.

There are, however, advantages in generating a final document towards the end of the PIA process.

The purpose of this phase is to document the PIA process and the outcomes.

The suggested deliverable is a PIA Report.

The following tasks are suggested:

Consolidate the decisions on avoidance and mitigation measures into a final version of the Issues Register and/or Privacy Design Features Paper
Produce a PIA Report
Make the PIA Report available to the PCG
Publish the PIA Report (withholding any security-sensitive information in confidential, or closed, appendices)