A Word checklist to help you decide whether a DPIA is likely required. Answer the questions for the processing in front of you. A “yes” is a prompt to assess, not a completed DPIA.
Free
More in Worksheets · Also see Policies
Preview
English. Word file (DPIA-Trigger-Checklist-3s0dla.docx). Excerpts below are copied from this upload.
Excerpt 1
Describe the purpose of the processing activity or project: Describe the type of personal data involved: Explain the scope and limits of the processing: Is the data being processed considered sensitive or special category data under the GDPR? Racial or ethnic origin
Excerpt 2
Religious or philosophical beliefs Trade union membership Biometric data for the purpose of uniquely identifying a natural person Data concerning a natural person's sex life or sexual orientation Is the data being processed on a large scale?
Excerpt 3
Data Processing Activity Does the processing involve automated decision making or profiling? Does the processing involve tracking or monitoring individuals? Does the processing involve combining data from multiple sources? Does the processing involve new or innovative technologies?
Excerpt 4
Children and minors Elderly individuals Individuals with disabilities or mental health conditions Victims of domestic violence or abuse Refugees or asylum seekers
Text copied from the uploaded file. It is not the complete download.
A free Word checklist to decide whether a Data Protection Impact Assessment is likely needed. Walk through high-risk processing flags before you start a new tool or dataset. It does not replace a full DPIA.
For one organization's internal use. You may customize the files. You may not resell or redistribute them as products. They are starting documents or training clips, not legal advice, not a certification, and not a guarantee of compliance — have qualified counsel review them for your situation.
A Word checklist of GDPR program tasks, from records of processing to incident handling. Use it to see what is still blank. Completing the list is not a certification and does not by itself prevent a fine.
Free
No checkout
A Word checklist of incident-response steps: contain, record, assess, and follow up. Keep it next to your register. Notification duties depend on the incident, not on ticking every box.
Free
No checkout
An Excel register of processing activities (ROPA-style). Add your systems, purposes, and retention periods. It does not inventory your estate for you.
Free
No checkout
DPIA Trigger Checklist (GDPR)
Free