[{"data":1,"prerenderedAt":-1},["ShallowReactive",2],{"$f_LZ6VlrB7GX_i2r77KQWQhQQkLzus2JlkMJEWI1i9cg":3},{"sections":4,"resultAnalysis":195,"id":260,"version":261,"newVersion":22,"label":262,"isPinned":22,"isShared":41,"sharingToken":263,"isRevision":22,"isBlockAnalysisShared":41,"nbReferences":216,"referenceId":9,"nbResponses":11,"parentId":9,"revisionDescription":9,"logoUrl":264,"description":265,"scheduleIntervalDays":9,"versionNumber":28,"dateCreation":266,"dateUpdate":267,"dateArchived":9,"archived":22,"type":268,"typeIndex":11,"typeColor":9,"typeIcon":9,"typeText":268,"creator":269,"objectType":277,"objectTypeIndex":35,"objectTypeColor":278,"objectTypeIcon":279,"objectTypeText":280,"defaultOwners":281,"tags":283,"privacyHubs":9,"nbQuestions":296,"nbQuestionsRequired":11,"nbDatas":11,"deadLineDays":9},[5],{"id":6,"slug":7,"label":8,"emoji":9,"type":10,"typeIndex":11,"typeColor":9,"typeIcon":9,"typeText":12,"descriptionHtml":13,"questions":14,"sections":194},"348af1a8-0870-4dfb-95db-80dfcf3c4c57","initial","ICO DPIA process checklist",null,"Default",0,"SectionType_Default","\u003Cp>This checklist ensures that Data Protection Impact Assessments (DPIAs) follow a complete and compliant process under the UK GDPR, from scoping and consultation to risk mitigation, documentation, and ongoing review. More information here: \u003Ca href=\"https://ico.org.uk/for-organisations/uk-gdpr-guidance-and-resources/accountability-and-governance/guide-to-accountability-and-governance/data-protection-impact-assessments/\">https://ico.org.uk/for-organisations/uk-gdpr-guidance-and-resources/accountability-and-governance/guide-to-accountability-and-governance/data-protection-impact-assessments/\u003C/a>\u003C/p>\u003Cp>\u003Cem>This checklist is provided for general guidance only and does not constitute legal advice. Completing it does not replace a full risk assessment or professional legal consultation. Organisations remain responsible for ensuring compliance with the UK GDPR and for seeking expert advice where necessary.\u003C/em>\u003C/p>",[15,42,58,73,88,104,119,134,149,164,179],{"id":16,"slug":17,"label":18,"tooltipHtml":9,"descriptionHtml":9,"badResponseCommentHtml":9,"goodResponseCommentHtml":9,"placeholder":9,"min":9,"max":9,"regex":9,"unit":9,"type":19,"typeIndex":20,"typeColor":9,"typeIcon":9,"typeText":21,"dynamicSelectType":9,"editableOptions":22,"complianceRules":23,"displayConditions":9,"answers":24,"listQuestions":9,"required":22,"requiredJustification":22,"suggestTask":22,"riskEnabled":41,"native":22},"fa218077-cb0b-4810-b35b-4951435f1f2d","780cea20-bfc1-4097-9339-2974cad5418f","We describe the nature, scope, context and purposes of the processing.","Radio",7,"Unique choice list",false,[],[25,37],{"id":26,"color":9,"rangeValue":9,"label":27,"slug":9,"description":9,"score":28,"nonApplicable":22,"tooltip":9,"goodAnswer":22,"redFlag":22,"impact":9,"probability":9,"taskSuggestions":29},"b1cca584-e4ee-4072-848b-b3542e51809e","Yes",1,[30],{"id":31,"label":32,"userId":9,"color":9,"description":33,"priority":34,"priorityIndex":35,"priorityColor":36,"priorityIcon":9,"priorityText":34},"bb3003b6-0459-43e9-91c2-31108db56cb5","Draft a clear DPIA scope section covering purpose, scope, context, and intended ","","Medium",2,"#ffc107",{"id":38,"color":9,"rangeValue":9,"label":39,"slug":9,"description":9,"score":11,"nonApplicable":22,"tooltip":9,"goodAnswer":22,"redFlag":22,"impact":9,"probability":9,"taskSuggestions":40},"b158346d-1d02-4d53-af86-cd9c015b1ae8","No",[],true,{"id":43,"slug":44,"label":45,"tooltipHtml":9,"descriptionHtml":9,"badResponseCommentHtml":9,"goodResponseCommentHtml":9,"placeholder":9,"min":9,"max":9,"regex":9,"unit":9,"type":19,"typeIndex":20,"typeColor":9,"typeIcon":9,"typeText":21,"dynamicSelectType":9,"editableOptions":22,"complianceRules":46,"displayConditions":9,"answers":47,"listQuestions":9,"required":22,"requiredJustification":22,"suggestTask":22,"riskEnabled":41,"native":22},"b88b7285-4c21-4083-919e-95148bf88100","f17d06d3-0735-4117-9ce4-5199355fc0a7","We ask our data processors to help us understand and document their processing activities and identify any associated risks.",[],[48,55],{"id":49,"color":9,"rangeValue":9,"label":27,"slug":9,"description":9,"score":28,"nonApplicable":22,"tooltip":9,"goodAnswer":22,"redFlag":22,"impact":9,"probability":9,"taskSuggestions":50},"4617a761-9e58-4fd2-8f41-4f81ee06d8bb",[51],{"id":52,"label":53,"userId":9,"color":9,"description":54,"priority":34,"priorityIndex":35,"priorityColor":36,"priorityIcon":9,"priorityText":34},"a91afd66-7106-4da4-a5d2-f6e0813c0b96","Request additional information from processors.","\u003Cp>Request detailed data flow maps, security measures, and risk notes from processors.\u003C/p>",{"id":56,"color":9,"rangeValue":9,"label":39,"slug":9,"description":9,"score":11,"nonApplicable":22,"tooltip":9,"goodAnswer":22,"redFlag":22,"impact":9,"probability":9,"taskSuggestions":57},"d48cab13-c025-4b6b-b22f-b6b80712e0a8",[],{"id":59,"slug":60,"label":61,"tooltipHtml":9,"descriptionHtml":9,"badResponseCommentHtml":9,"goodResponseCommentHtml":9,"placeholder":9,"min":9,"max":9,"regex":9,"unit":9,"type":19,"typeIndex":20,"typeColor":9,"typeIcon":9,"typeText":21,"dynamicSelectType":9,"editableOptions":22,"complianceRules":62,"displayConditions":9,"answers":63,"listQuestions":9,"required":22,"requiredJustification":22,"suggestTask":22,"riskEnabled":41,"native":22},"8536b1b9-0239-4969-b01e-7b914023ccdd","f52ed1a2-d5f5-40b2-95dc-967cd4513af6","We consider how best to consult individuals (or their representatives) and other relevant stakeholders.",[],[64,70],{"id":65,"color":9,"rangeValue":9,"label":27,"slug":9,"description":9,"score":28,"nonApplicable":22,"tooltip":9,"goodAnswer":22,"redFlag":22,"impact":9,"probability":9,"taskSuggestions":66},"5e38c2e8-e281-4f20-8634-043e2b52bb7e",[67],{"id":68,"label":69,"userId":9,"color":9,"description":33,"priority":34,"priorityIndex":35,"priorityColor":36,"priorityIcon":9,"priorityText":34},"21c6e3da-33c0-46a0-955a-6462b31729c2","Plan and document consultation process; gather and log feedback.",{"id":71,"color":9,"rangeValue":9,"label":39,"slug":9,"description":9,"score":11,"nonApplicable":22,"tooltip":9,"goodAnswer":22,"redFlag":22,"impact":9,"probability":9,"taskSuggestions":72},"21e29faa-4dc4-4b5b-88a3-6e7c321f24b7",[],{"id":74,"slug":75,"label":76,"tooltipHtml":9,"descriptionHtml":9,"badResponseCommentHtml":9,"goodResponseCommentHtml":9,"placeholder":9,"min":9,"max":9,"regex":9,"unit":9,"type":19,"typeIndex":20,"typeColor":9,"typeIcon":9,"typeText":21,"dynamicSelectType":9,"editableOptions":22,"complianceRules":77,"displayConditions":9,"answers":78,"listQuestions":9,"required":22,"requiredJustification":22,"suggestTask":22,"riskEnabled":41,"native":22},"7b3330d1-c831-4edc-bfc1-1027c317fa73","21262ed0-a04a-42a7-b144-b47e2ef220fc","We ask for the advice of our data protection officer",[],[79,85],{"id":80,"color":9,"rangeValue":9,"label":27,"slug":9,"description":9,"score":28,"nonApplicable":22,"tooltip":9,"goodAnswer":22,"redFlag":22,"impact":9,"probability":9,"taskSuggestions":81},"a8d245c1-2ac6-4cf0-b631-bd72a22c59b4",[82],{"id":83,"label":84,"userId":9,"color":9,"description":33,"priority":34,"priorityIndex":35,"priorityColor":36,"priorityIcon":9,"priorityText":34},"e31dfb7a-50b0-4f64-a09c-01f5a0fc860f","Record DPO comments and risk recommendations in DPIA documentation.",{"id":86,"color":9,"rangeValue":9,"label":39,"slug":9,"description":9,"score":11,"nonApplicable":22,"tooltip":9,"goodAnswer":22,"redFlag":22,"impact":9,"probability":9,"taskSuggestions":87},"a53bfb0c-df49-423b-bf30-510d2799181e",[],{"id":89,"slug":90,"label":91,"tooltipHtml":9,"descriptionHtml":9,"badResponseCommentHtml":9,"goodResponseCommentHtml":9,"placeholder":9,"min":9,"max":9,"regex":9,"unit":9,"type":19,"typeIndex":20,"typeColor":9,"typeIcon":9,"typeText":21,"dynamicSelectType":9,"editableOptions":22,"complianceRules":92,"displayConditions":9,"answers":93,"listQuestions":9,"required":22,"requiredJustification":22,"suggestTask":22,"riskEnabled":41,"native":22},"491241f8-f83f-4885-a403-86c31ae22a56","4ef568d6-5585-4462-9a9b-811cde7efd10","We check that the processing is necessary for and proportionate to our purposes, and describe how we will ensure compliance with data protection principles.",[],[94,101],{"id":95,"color":9,"rangeValue":9,"label":27,"slug":9,"description":9,"score":28,"nonApplicable":22,"tooltip":9,"goodAnswer":22,"redFlag":22,"impact":9,"probability":9,"taskSuggestions":96},"5207d267-ce40-4596-a795-b4e8c287b071",[97],{"id":98,"label":99,"userId":9,"color":9,"description":100,"priority":34,"priorityIndex":35,"priorityColor":36,"priorityIcon":9,"priorityText":34},"349f8240-9b66-45ee-873c-8a2575dc271e","Complete necessity and proportionality analysis","\u003Cp>Complete necessity and proportionality analysis (cross-reference ICO guidance on principles).\u003C/p>",{"id":102,"color":9,"rangeValue":9,"label":39,"slug":9,"description":9,"score":11,"nonApplicable":22,"tooltip":9,"goodAnswer":22,"redFlag":22,"impact":9,"probability":9,"taskSuggestions":103},"cea94d01-54ec-4d82-9445-7dbd5ce2b933",[],{"id":105,"slug":106,"label":107,"tooltipHtml":9,"descriptionHtml":9,"badResponseCommentHtml":9,"goodResponseCommentHtml":9,"placeholder":9,"min":9,"max":9,"regex":9,"unit":9,"type":19,"typeIndex":20,"typeColor":9,"typeIcon":9,"typeText":21,"dynamicSelectType":9,"editableOptions":22,"complianceRules":108,"displayConditions":9,"answers":109,"listQuestions":9,"required":22,"requiredJustification":22,"suggestTask":22,"riskEnabled":41,"native":22},"0b8afa12-fcb5-480c-8351-d455dce7f48f","ab1fb4e0-6153-4134-aee4-74515bb8b2fa","We do an objective assessment of the likelihood and severity of any risks to individuals’ rights and interests.",[],[110,116],{"id":111,"color":9,"rangeValue":9,"label":27,"slug":9,"description":9,"score":28,"nonApplicable":22,"tooltip":9,"goodAnswer":22,"redFlag":22,"impact":9,"probability":9,"taskSuggestions":112},"c42852ce-9b2c-40d4-a198-503e07a29391",[113],{"id":114,"label":115,"userId":9,"color":9,"description":33,"priority":34,"priorityIndex":35,"priorityColor":36,"priorityIcon":9,"priorityText":34},"0f470592-4bf1-4c34-bc86-43de65d7f58b"," Use a risk matrix or scoring tool; document methodology.",{"id":117,"color":9,"rangeValue":9,"label":39,"slug":9,"description":9,"score":11,"nonApplicable":22,"tooltip":9,"goodAnswer":22,"redFlag":22,"impact":9,"probability":9,"taskSuggestions":118},"2f1814bb-f31a-4b33-8ca5-9843a6c53f37",[],{"id":120,"slug":121,"label":122,"tooltipHtml":9,"descriptionHtml":9,"badResponseCommentHtml":9,"goodResponseCommentHtml":9,"placeholder":9,"min":9,"max":9,"regex":9,"unit":9,"type":19,"typeIndex":20,"typeColor":9,"typeIcon":9,"typeText":21,"dynamicSelectType":9,"editableOptions":22,"complianceRules":123,"displayConditions":9,"answers":124,"listQuestions":9,"required":22,"requiredJustification":22,"suggestTask":22,"riskEnabled":41,"native":22},"e319296f-0914-4700-bbf8-64508429f6dd","cf38a3cf-8578-4927-a7f6-39726b69a79c","We identify measures we can put in place to eliminate or reduce high risks.",[],[125,131],{"id":126,"color":9,"rangeValue":9,"label":27,"slug":9,"description":9,"score":28,"nonApplicable":22,"tooltip":9,"goodAnswer":22,"redFlag":22,"impact":9,"probability":9,"taskSuggestions":127},"56a84864-9d06-46d6-baa5-1f0ed5e5758c",[128],{"id":129,"label":130,"userId":9,"color":9,"description":33,"priority":34,"priorityIndex":35,"priorityColor":36,"priorityIcon":9,"priorityText":34},"84c8b271-7176-4f83-9597-260d9523e0eb","Create a risk mitigation plan with timelines and responsibilities.",{"id":132,"color":9,"rangeValue":9,"label":39,"slug":9,"description":9,"score":11,"nonApplicable":22,"tooltip":9,"goodAnswer":22,"redFlag":22,"impact":9,"probability":9,"taskSuggestions":133},"8c1e05fa-10da-43dc-94a4-90c315057670",[],{"id":135,"slug":136,"label":137,"tooltipHtml":9,"descriptionHtml":9,"badResponseCommentHtml":9,"goodResponseCommentHtml":9,"placeholder":9,"min":9,"max":9,"regex":9,"unit":9,"type":19,"typeIndex":20,"typeColor":9,"typeIcon":9,"typeText":21,"dynamicSelectType":9,"editableOptions":22,"complianceRules":138,"displayConditions":9,"answers":139,"listQuestions":9,"required":22,"requiredJustification":22,"suggestTask":22,"riskEnabled":41,"native":22},"83ca72dc-589b-45ce-831b-fdb8d43d8669","f3b6fed7-188c-43a6-87ce-8d7ecae9e327","We record our decision-making in the outcome of the DPIA, including any difference of opinion with our DPO or individuals consulted.",[],[140,146],{"id":141,"color":9,"rangeValue":9,"label":27,"slug":9,"description":9,"score":28,"nonApplicable":22,"tooltip":9,"goodAnswer":22,"redFlag":22,"impact":9,"probability":9,"taskSuggestions":142},"eb9f97d1-aceb-4885-badd-9810880bc9f7",[143],{"id":144,"label":145,"userId":9,"color":9,"description":33,"priority":34,"priorityIndex":35,"priorityColor":36,"priorityIcon":9,"priorityText":34},"8261e6e0-c027-4196-bda7-8a3d1ee3fd55","Keep a formal decision log with version control.",{"id":147,"color":9,"rangeValue":9,"label":39,"slug":9,"description":9,"score":11,"nonApplicable":22,"tooltip":9,"goodAnswer":22,"redFlag":22,"impact":9,"probability":9,"taskSuggestions":148},"622708dd-3a5c-4a27-b034-57af9db25c56",[],{"id":150,"slug":151,"label":152,"tooltipHtml":9,"descriptionHtml":9,"badResponseCommentHtml":9,"goodResponseCommentHtml":9,"placeholder":9,"min":9,"max":9,"regex":9,"unit":9,"type":19,"typeIndex":20,"typeColor":9,"typeIcon":9,"typeText":21,"dynamicSelectType":9,"editableOptions":22,"complianceRules":153,"displayConditions":9,"answers":154,"listQuestions":9,"required":22,"requiredJustification":22,"suggestTask":22,"riskEnabled":41,"native":22},"545434ca-7400-417f-8520-51c8272deee1","7ebe3027-10e3-49d5-9986-32c09c57e347","We implement the measures we identified, and integrate them into our project plan.",[],[155,161],{"id":156,"color":9,"rangeValue":9,"label":27,"slug":9,"description":9,"score":28,"nonApplicable":22,"tooltip":9,"goodAnswer":22,"redFlag":22,"impact":9,"probability":9,"taskSuggestions":157},"62c70d62-b664-4ded-aaa2-0cde35b47dfd",[158],{"id":159,"label":160,"userId":9,"color":9,"description":33,"priority":34,"priorityIndex":35,"priorityColor":36,"priorityIcon":9,"priorityText":34},"12f9cec5-1042-44e9-8dda-2a3fa16456cf","Update project management tool with DPIA actions and monitor completion.",{"id":162,"color":9,"rangeValue":9,"label":39,"slug":9,"description":9,"score":11,"nonApplicable":22,"tooltip":9,"goodAnswer":22,"redFlag":22,"impact":9,"probability":9,"taskSuggestions":163},"10fd3320-d2b8-47ac-b7c9-619da63dbbcb",[],{"id":165,"slug":166,"label":167,"tooltipHtml":9,"descriptionHtml":9,"badResponseCommentHtml":9,"goodResponseCommentHtml":9,"placeholder":9,"min":9,"max":9,"regex":9,"unit":9,"type":19,"typeIndex":20,"typeColor":9,"typeIcon":9,"typeText":21,"dynamicSelectType":9,"editableOptions":22,"complianceRules":168,"displayConditions":9,"answers":169,"listQuestions":9,"required":22,"requiredJustification":22,"suggestTask":22,"riskEnabled":41,"native":22},"395ea3e3-c592-4c71-87f0-4f9d0e6a0ced","ec64c872-9d0e-43b7-9764-eaccc09084e8","We consult the ICO before processing, if we cannot mitigate high risks.",[],[170,176],{"id":171,"color":9,"rangeValue":9,"label":27,"slug":9,"description":9,"score":28,"nonApplicable":22,"tooltip":9,"goodAnswer":22,"redFlag":22,"impact":9,"probability":9,"taskSuggestions":172},"80e70cd6-38b8-4fd5-b8b8-b869e9e5ebb2",[173],{"id":174,"label":175,"userId":9,"color":9,"description":33,"priority":34,"priorityIndex":35,"priorityColor":36,"priorityIcon":9,"priorityText":34},"86f95045-61c4-4e7b-89bd-0f6bf40370b9","Submit DPIA and risk summary to ICO; document submission and follow-up.",{"id":177,"color":9,"rangeValue":9,"label":39,"slug":9,"description":9,"score":11,"nonApplicable":22,"tooltip":9,"goodAnswer":22,"redFlag":22,"impact":9,"probability":9,"taskSuggestions":178},"b8a4988b-2f7b-4965-be7a-329c77f00445",[],{"id":180,"slug":181,"label":182,"tooltipHtml":9,"descriptionHtml":9,"badResponseCommentHtml":9,"goodResponseCommentHtml":9,"placeholder":9,"min":9,"max":9,"regex":9,"unit":9,"type":19,"typeIndex":20,"typeColor":9,"typeIcon":9,"typeText":21,"dynamicSelectType":9,"editableOptions":22,"complianceRules":183,"displayConditions":9,"answers":184,"listQuestions":9,"required":22,"requiredJustification":22,"suggestTask":22,"riskEnabled":41,"native":22},"f6781e5d-0505-4319-b516-18fb88b131ec","a0585c3d-6323-4c76-940d-3a6a324f3397","We keep our DPIAs under review and revisit them when necessary",[],[185,191],{"id":186,"color":9,"rangeValue":9,"label":27,"slug":9,"description":9,"score":28,"nonApplicable":22,"tooltip":9,"goodAnswer":22,"redFlag":22,"impact":9,"probability":9,"taskSuggestions":187},"b55ddda5-77fd-4a8c-9b03-afcfa9394476",[188],{"id":189,"label":190,"userId":9,"color":9,"description":33,"priority":34,"priorityIndex":35,"priorityColor":36,"priorityIcon":9,"priorityText":34},"925baba7-57eb-40e1-8e6e-3b15a5766ec8","Schedule annual or trigger-based reviews; log review dates and changes.",{"id":192,"color":9,"rangeValue":9,"label":39,"slug":9,"description":9,"score":11,"nonApplicable":22,"tooltip":9,"goodAnswer":22,"redFlag":22,"impact":9,"probability":9,"taskSuggestions":193},"7e734856-b6e2-497b-b993-28c75f6d61a5",[],[],[196,212,229,246],{"id":197,"label":198,"variant":199,"variantIndex":11,"variantColor":200,"variantIcon":201,"variantText":202,"contentHtml":203,"displayConditions":204},"8516c513-3707-4088-b20b-6d574390ecab","Processing must not start until ICO response is received.","Info","#1E8EE1","icon-alert-circle","Information","\u003Cp>Processing must not start until ICO response is received.\u003C/p>",{"id":205,"separator":206,"field":9,"operator":207,"value":9,"rules":208},"0ad7c8bc-7271-405e-a469-c762e5ed8dfd","And","equal",[209],{"id":210,"separator":9,"field":165,"operator":207,"value":171,"rules":211},"c06be994-2b9a-487e-8227-c8d765956531",[],{"id":213,"label":214,"variant":215,"variantIndex":216,"variantColor":217,"variantIcon":218,"variantText":215,"contentHtml":219,"displayConditions":220},"591cb580-1e26-40c8-ba96-a226f680f68c","Incomplete DPIA process","Danger",3,"#DC3545","icon-alert-triangle","\u003Cul>\u003Cli>\u003Cp>Likely gaps in compliance.\u003C/p>\u003C/li>\u003Cli>\u003Cp>Must review and complete missing steps before proceeding with processing.\u003C/p>\u003C/li>\u003C/ul>",{"id":221,"separator":206,"field":9,"operator":207,"value":9,"rules":222},"aba896c2-f604-4fd0-8d21-e04cf07580b4",[223],{"id":224,"separator":9,"field":225,"operator":226,"value":227,"rules":228},"cf77cd05-7e9c-4383-a94a-56164d594301","score","lessThanInclusive",4,[],{"id":230,"label":231,"variant":232,"variantIndex":35,"variantColor":36,"variantIcon":201,"variantText":232,"contentHtml":233,"displayConditions":234},"bc71b4b8-60c8-40ca-92e0-6c158502b6a3","Partially complete DPIA process","Warning","\u003Cul>\u003Cli>\u003Cp>Some key steps in place but risk of ICO criticism if challenged.\u003C/p>\u003C/li>\u003Cli>\u003Cp>Complete outstanding tasks before finalising the DPIA outcome.\u003C/p>\u003C/li>\u003C/ul>",{"id":235,"separator":206,"field":9,"operator":207,"value":9,"rules":236},"3b8c3cd2-6700-4207-bc0a-f0890aa68855",[237,242],{"id":238,"separator":9,"field":225,"operator":239,"value":240,"rules":241},"80663b15-c98f-432a-852f-fa6468895842","greaterThanInclusive",5,[],{"id":243,"separator":9,"field":225,"operator":226,"value":244,"rules":245},"d083c350-5366-4ee0-a0fb-f4714f51bd73",8,[],{"id":247,"label":248,"variant":249,"variantIndex":28,"variantColor":250,"variantIcon":251,"variantText":249,"contentHtml":252,"displayConditions":253},"0bbba920-cd20-4b74-85c5-1794962ebda4","Complete DPIA process","Success","#1ab586","icon-checkmark","\u003Cul>\u003Cli>\u003Cp>Strong evidence of a thorough and accountable process.\u003C/p>\u003C/li>\u003Cli>\u003Cp>Still ensure ongoing review and documentation for compliance.\u003C/p>\u003C/li>\u003C/ul>",{"id":254,"separator":206,"field":9,"operator":207,"value":9,"rules":255},"9ea2718a-fe1e-40a1-979d-6bb718109327",[256],{"id":257,"separator":9,"field":225,"operator":239,"value":258,"rules":259},"e2877242-8409-436b-af2d-a9d0774f5701",9,[],"4e31f3a7-72ea-41bc-fa40-08ddd8172e55","1.0"," ICO DPIA process checklist","hNuXbDwWPiydh1ZmZ03IgYnoxRofebteTDZIJnLl1WKj0yZ9txhlaOisS2Gy","https://static.dastra.eu/tenant-3/audit/CjcFIbs6LeKGvt/icon-audit500x-150-150.png","\"This checklist ensures that Data Protection Impact Assessments (DPIAs) follow a complete and compliant process under the UK GDPR, from scoping and consultation to risk mitigation, documentation, and ongoing review. More information here: https://ico.org.uk/for-organisations/uk-gdpr-guidance-and-resources/accountability-and-governance/guide-to-accountability-and-governance/data-protection-impact-assessments/\n\nThis checklist is provided for general guidance only and does not constitute legal advice. Completing it does not replace a full risk assessment or professional legal consultation. Organisations remain responsible for ensuring compliance with the UK GDPR and for seeking expert advice where necessary.","2025-08-10T14:23:44.8981395","2025-12-01T14:32:15.4898613","Standard",{"id":270,"displayName":271,"familyName":272,"givenName":273,"email":274,"active":41,"color":275,"avatarUrl":276,"tenantId":11},38,"Paul-Emmanuel Bidault","Bidault","Paul-Emmanuel","paulemmanuel.bidault@dastra.eu","#FA4115","https://static.dastra.eu/tenant-27/avatar/38/paul-emmanuel-bidault-150.jpg","DataProcessing","#E7630A","ds-icon-data-processing","Processing activity",[282],{"id":270,"displayName":271,"familyName":272,"givenName":273,"email":274,"active":41,"color":275,"avatarUrl":276,"tenantId":11},[284,292],{"id":285,"label":286,"type":287,"typeIndex":258,"typeColor":288,"typeIcon":289,"typeText":290,"color":291},"ec674609-8b1a-4145-a815-7e0c2a6573ff","ICO","AuditTemplate","#83d162","ds-icon-audit","Questionnaire template","#0CB8AE",{"id":293,"label":294,"type":287,"typeIndex":258,"typeColor":288,"typeIcon":289,"typeText":290,"color":295},"ff1dbf03-7561-4b63-996b-e899af94bb9a","PIA","#C75FFC",11]