Zansa › Answers › Privacy, security and ownership
What is a privacy impact assessment and when is one needed?
A privacy impact assessment, called a data protection impact assessment under GDPR, is a structured review of the privacy risks of a planned use of data. GDPR requires one when processing is likely to result in high risk to individuals, such as large-scale sensitive data. This is general information, not legal advice.
Even where not mandatory, a short assessment is useful before connecting systems or adopting new tools. It asks what data is used, why, who can see it, what could go wrong and how to reduce the risk.
The result may be to drop fields, add controls or choose a different approach. Keep it on file as evidence of accountability. Rules differ by country and sector, so check how this applies to you with a qualified adviser.
Want this applied to your business? Zansa builds dashboards and forecasts for small and mid-sized companies worldwide. Start with a free intro call.
Book a call