Foreword
Introduction
- Part I – How to Determine whether an Assessment is Needed
- Privacy and PIA Background information
Preparing for the PIA Screening process
The PIA screening process

Part II – Full-Scale Privacy Impact Assessment

Part III – Small-Scale Privacy Impact Assessment

Part IV– Privacy Law Compliance Checking

Privacy law compliance check
- Detailed Template: Privacy and Electronic Communications Regulations (Marketing)

Part V– Data Protection Act Compliance Checking

Data Protection Act compliance check
- Detailed Template: Data Protection Act

Part VI – Additional Information

Full-Scale PIA – Review and audit phase

This is Phase 5 of the five-phase PIA process.

The purpose of this phase is to ensure that the undertakings arising from the consultation and analysis phase are carried through into the running system or implemented project.

The suggested deliverables are delivery of the undertakings in the Privacy Design Features Paper.

The following tasks are suggested:

Undertake a review of the implementation of the mitigation and avoidance measures that were documented in the Issues Register and/or the Privacy Design Features Paper.
Prepare a review report.
Present the Privacy Review Report to the PCG.
Make the Privacy Review Report publicly available.

As with the preceding phases, it is beneficial to perform this phase at the appropriate stage in the life-cycle of the overall project. This could be, for example, at a milestone such as the detailed design review, or its equivalent in the project method.

Another approach that organisations may consider appropriate or cost-effective is to build the review of performance into the organisation's standard, periodic or occasional internal audit or external audit processes.