Data Protection Impact Assessment Walkthrough
Run a DPIA for a high-risk activity.
The Open buttons send the prompt text as currently shown below to that site only when you click. Fill in the placeholders first.
[VERIFY] is an editorial flag, not a blank to fill. Wherever the prompt shows [VERIFY], check that item against a reliable source before you use it.
Walk me through a data protection impact assessment (DPIA). This is a guided worksheet and not legal advice. Interview me one question at a time and wait for each answer: (1) describe the activity or project, (2) what personal data is involved, whose, and how much, (3) the purpose and why this method is needed, (4) who has access and where data goes, (5) how long it is kept, (6) what could go wrong for individuals (harm, discrimination, loss of control, exposure), (7) what safeguards exist, and (8) whether people were consulted. Starting description: [PROJECT_DESCRIPTION]. After the interview, produce a DPIA document with: a description of processing; necessity and proportionality (could the purpose be achieved with less data?); a risk register table with Risk | Likelihood | Severity | Overall | Existing control | Further measure | Residual risk; an assessment of whether high residual risk remains and whether regulators must be consulted [VERIFY]; the sign-off section with names and dates; and a review date. Flag any answer that suggests the activity should not go ahead as designed. Mark legal conclusions as [VERIFY with a qualified adviser]. Treat all output as a draft for discussion, not legal advice. Have a qualified lawyer or privacy specialist who knows [JURISDICTION] verify it before you rely on it.
Fill in before use
Optional: type your details and the prompt above updates. Nothing is saved or sent.
Replace each bracketed placeholder with your own details, then paste into Any AI or another assistant.