Data Protection Impact Assessment (DPIA)

Data Protection Impact Assessment (DPIA)

Data Protection Impact Assessment (DPIA) Definition:

A risk assessment carried out before handling personal data, designed to spot and address potential privacy risks — especially when using high-risk AI systems. Both Australia’s Privacy Act 2025 and the GDPR require it.

Data Protection Impact Assessment (DPIA)

Example

A social media site can’t gather data from users under 16 unless a parent says it’s okay.