A Guide to the GDPR Requirements for DPIAs & Processing

Introduction

The need for a DPIA was recently highlighted when it was alleged that the UK Government had not carried out a DPIA for the ‘track and trace’ programme for COVID-19.

Article 35 of the GDPR stipulates that where a type of processing uses new technologies and is likely to result in high risk to the rights and freedoms of natural persons then the controller shall prior to processing carry out a Data Protection Impact Assessment (DPIA) to ensure that those rights and freedoms are not compromised.

The ICO and other EU Data Protection Authorities have published guidance on how and when to use DPIA and apart from it being a legal requirement, using a DPIA is good project and risk management.

What You Will Learn

This webinar will cover the following:

• What is a DPIA?
• Who should instigate a DPIA?
• How and when to use a DPIA?
• Latest guidance from the ICO and EU Regulators

This webinar was recorded on 18th November 2020