I. DPIA Template Design & Configuration

The Privacy Pillar DPIA module provides organisations with a structured and scalable way to conduct Data Protection Impact Assessments. It enables teams to design customised DPIA templates, capture evidence-backed responses, and automatically evaluate privacy risks across processing activities, systems, and vendors. This guide explains the complete DPIA workflow, from template configuration to dashboard-driven risk analysis and remediation.

Creating a DPIA Template

This focuses on defining how DPIAs will be conducted within the organisation by configuring the structure, questions, and evidence requirements.

Step 1: DPIA Templates Dashboard 

The DPIA workflow begins from the DPIA Templates dashboard. This dashboard serves as the central workspace for creating and managing DPIA templates. From here, organisations can:

• View all existing DPIA templates
• Track published and draft templates
• Edit existing templates
• Initiate the creation of a new DPIA template

To begin designing a new DPIA template, the organisation selects “New Template.”

Step 2: Select Template Creation Method (Default vs New)

Once “New Template” is selected, the platform opens the “Choose a starting template” screen.

At this decision point, the organisation chooses how the DPIA template will be created:

• Use the default DPIA template – to proceed with a pre-configured, standard DPIA structure, or
• Skip and start from blank – to design a fully customised DPIA template.

This step acts as the design gateway, allowing the organisation to either accelerate DPIA deployment using a standard framework or build a template tailored to specific processing activities, sectoral risks, or regulatory requirements.

Step 3: Template Builder – Define Template Details

If the organisation chooses to start from scratch, the platform opens the Template Builder.

Here, the organisation must provide:

• A Template Title (mandatory), and
• An optional Description to document the purpose, scope, or intended use of the DPIA template.

This step establishes the identity and governance context of the DPIA before configuring assessment logic.

Step 4: Template Builder – Configure Questions and Evidence

The organisation then proceeds to design the DPIA structure by adding assessment questions and response attributes.

Here, the organisation defines:

1. What questions are asked
2. How responses are captured
3. What evidence is mandatory
4. Which fields are required

This step operationalises the DPIA by embedding legal, technical, and risk-based requirements into the assessment workflow.

Step 5: Review, Save, and Publish the Template

Once configuration is complete, the organisation moves to Preview, saves the template as Draft if needed, and finally Publishes the template.

This step formally transitions the DPIA template from a design artifact into an active compliance and risk assessment instrument.