Skip to main content
Back to the glossary

Legislation

DPIA (Data Protection Impact Assessment)

Plain-language definition

Formal risk assessment of personal data processing before launch (mandatory for selected cases).

Legislationcategory
2listed sources
May 26, 2026updated

DPIA is a more detailed assessment than balance test. It makes sense for processing that may create a high risk to people's rights and freedoms, for example extensive monitoring, sensitive spaces or combined systems.

If the DPIA comes out as mandatory, it must be completed before the processing starts and should describe the risks and measures (minimization, security, approaches).

Review and sources

Verified sources for this term

Updated May 26, 2026