Now the focus is on the operational execution of Data Protection Impact Assessments (DPIAs) using published DPIA templates, where organisations launch DPIA assessments, collect responses and supporting evidence, automatically evaluate privacy risks, and manage corrective actions through a centralised dashboard.
Assessing DPIA
This transforms DPIAs from configured templates into active risk management and governance workflows, enabling continuous oversight, accountability, and regulatory readiness.
Step 1: DPIA Assessments Dashboard
The DPIA execution workflow begins from the DPIA Assessments dashboard. This dashboard, which also serves as the primary launch point for initiating DPIA assessments, provides a consolidated view of all DPIA activities across the organisation.
From the DPIA Dashboard, users can:
Within the DPIA Dashboard, the user can initiate a DPIA assessment in two ways.
When the user selects “Send Assessment” from the DPIA Dashboard, the platform opens the Send Assessment configuration screen. This screen is used to define the context, ownership, and recipients of the DPIA before it is issued.
On this screen, the user is required to provide the following details:
Assessment Name (Mandatory)
The Assessment Name is used to uniquely identify the DPIA instance. This typically reflects the nature of the assessment, such as the vendor name, project name, or assessment period (e.g., Vendor Security Audit Q1).
Description (Mandatory)
The Description provides contextual information about the purpose of the DPIA. This helps assignees understand the scope of the assessment and the expectations for completion.
Template (Mandatory)
The user selects a published DPIA template from the dropdown.
This determines:
Only published templates are available for selection, ensuring governance and consistency.
Responsible (Mandatory)
The Responsible field identifies the internal owner of the DPIA. This user is accountable for:
This supports accountability and internal governance requirements.
Assignees (Mandatory)
The Assignees are the individuals or external parties (such as vendors or service providers) who are required to complete the assessment questionnaire.
Once all mandatory fields are completed, the user selects “Send Assessment.”
The DPIA is then issued to the selected assignees, and its status becomes visible on the dashboard for tracking, review, and risk analysis.
Alternatively, the organisation may initiate a DPIA directly from an already published template visible on the dashboard.
From the Published Templates section, the user can:
This option allows organisations to quickly launch assessments using an approved and pre-configured template, without navigating through the “Send Assessment” button separately.
Both options 1 & 2 ultimately lead to the same assessment execution flow. The difference lies only in how the assessment is initiated, either through a general “Send Assessment” action or directly from a specific published template.