Contents

Make an initial assessment of the privacy risks

Once you have gone through all of the other steps outlined above, you will be in a position to list some of the initial privacy impacts, risks and vulnerabilities that the project might present. This is an initial view which you can use to inform how you complete your PIA, what questions you ask stakeholders and what problems might arise during implementation of the project.

However, you must be clear that this is merely a first attempt at identifying privacy risks and has been very much considered from the perspective of your organisation. During the PIA stakeholders might raise concerns that you have not considered or might put much greater weight on concerns you identified but dismissed.

« Previous | Top of page | Next »

Contents

Using this handbook

Part 1 – Background information

Chapter I – Overview

Chapter II – Privacy, risks and solutions

Part 2 – The PIA process

Process Maps

Chapter III – Initial assessment

Chapter IV – Full-scale privacy impact assessment

Chapter V – Small-scale privacy impact assessment

Chapter VI – Privacy law and other legal compliance checking

Chapter VII – Data Protection Act compliance check (including PECR)

Chapter VIII – Other ICO guidance

Appendix 1 – The PIA screening questions

Appendix 2 – Data protection compliance checklist template

Appendix 3 – PECR compliance checklist template

Appendix 4 – Privacy strategies

Part II - The PIA process

Chapter III – Initial assessment

Make an initial assessment of the privacy risks