Let's talk
Cover of Data Protection Impact Assessments: A Step-by-Step Guide by Data Menu

Compliance

Data Protection Impact Assessments: A Step-by-Step Guide

Screen, assess and sign off high-risk projects, with a full DPIA template and risk register.

Format
PDF
Length
19 pages
Edition
1st edition, November 2026
Published
2 November 2026
Publisher
Data Menu
£29PDF, single instant download

Payment is handled by Stripe. We email your download link as well as showing it after payment. Each purchase is a single download, so save the file when it arrives. See our refund policy.

About

About this guide

A practical UK guide to data protection impact assessments under Article 35 of the UK GDPR. It explains when a DPIA is required, including the ICO's list of processing that requires one, and walks through each stage in order: describing the processing, consultation, necessity and proportionality, scoring risk, mitigation, sign-off and when you must consult the ICO.

Includes four hypothetical screening examples and printable templates: a screening record, a full DPIA record, a risk register, a sign-off and review log and a final checklist.

General educational guidance written by Data Menu. It is not legal advice.

Contents

What is inside

  1. What a DPIA is and why it mattersWhat a DPIA is, what it must contain and why it mattersp. 4
  2. Do you need a DPIA?The Article 35 triggers, the ICO list and the nine indicatorsp. 5
  3. Who does what, and when to startRoles, timing and who signs offp. 7
  4. Describing the processingDescribing nature, scope, context and purposesp. 8
  5. Consultation, necessity and proportionalityConsulting people and testing necessity and proportionalityp. 10
  6. Identifying and assessing the risksHarms to individuals and a likelihood and severity matrixp. 11
  7. Reducing the risk and signing offMitigation, residual risk and sign-offp. 13
  8. Consulting the ICO and keeping the DPIA alivePrior consultation with the ICO and ongoing reviewp. 14
  9. Four hypothetical screening examplesFour hypothetical screening examplesp. 15
  10. Templates and checklistsScreening record, DPIA record, risk register and sign-off templatesp. 16

Audience

Who it is for

  • Project and operations leads
  • Business owners
  • IT and security leads
  • Anyone launching a system that uses personal data

Delivery. After payment you can download the PDF straight away, and we email you a personal link to the same page. Each purchase is a single download, so please save the file somewhere safe when it arrives. If a download is interrupted, you can retry from that page for a few minutes. Our guides are practical, educational material. They are not legal advice. If you need advice on your own situation, speak to a qualified adviser.

More from the Compliance shelf

Back to the library