Move from request and screening into assessment, risks, review and approval with accountable ownership.
- Link to a case or processing activity
- Versioned assessment revisions
- Likelihood, impact and residual risk
- Review dates and approvals
DPIA management
Make privacy risk part of delivery
Screen new initiatives, conduct structured assessments, record mitigations and take DPIAs through DPO review and approval.
Approved assessment revisions are immutable. Later changes create a new revision instead of rewriting the decision history.
A clearer Privacy Office