Data protection impact assessment checklist

James Boyle

<img src="https://mdr-one.com/wp-content/uploads/2025/04/james-boyle-576x576.jpg" title="James Boyle" alt="James Boyle" width="576" height="576" />

Emily Francis

<img src="https://mdr-one.com/wp-content/uploads/2025/04/emily-francis_b3a3419-576x576.jpg" title="Emily Francis" alt="Emily Francis" width="576" height="576" />

Louise Schofield

<img src="https://mdr-one.com/wp-content/uploads/2025/04/louiseschofield.4x1a8765-576x576.jpg" title="Louise Schofield" alt="Louise Schofield" width="576" height="576" />

James Boyle, Emily Francis, Louise Schofield

1m read
May 7, 2025

In the ever-evolving landscape of data protection, organisations are increasingly required to be proactive in safeguarding personal data.

A Data Protection Impact Assessment (DPIA) is an essential tool, serving as a process to help identify and minimise the data protection risks of a project or processing activity.

This checklist is designed to guide you through the steps of conducting a DPIA, ensuring that you not only comply with the UK General Data Protection Regulation but also integrate best practices into your data processing activities. It will assist you in determining when a DPIA is necessary, how to carry it out effectively, and what measures to take following the assessment. 

Whether you are initiating a new project or revising an existing one, this checklist will help you navigate the complexities of data protection and maintain the integrity of your data processing operations. 

Download the checklist

Resource Centre

Taiwan: new workplace bullying guidelines

What are the key changes? These updates introduce specific obligations and guidelines that employers must follow depending on their employee headcount: All employers: Must take active steps to prevent bullying Should respond promptly whenever a possible case comes to light 10+ employees: Have a clear complaints procedure in place Make sure all employees are aware of the

France: Mutual termination agreements – reduced periods for unemployment benefits

Individual mutual termination agreements (or "rupture conventionnelle individuelle") remain a widely used method for ending indefinite-term employment contracts in France.

Article, Legal Updates

Australia (Victoria): Working from home could soon become a statutory right

The Victorian Government in Australia has introduced the working from home bill to Parliament which would establish a statutory right for eligible employees to work from home two days a week. The bill is still being debated, but if passed, it is expected to come into force on 1 September 2026, or 1 July 2027 for employers with less than 15 employees.

Article, Legal Updates

Japan: Changes to equal pay requirements effective 1 October 2026

From 1 October 2026, Japan will introduce changes to its “equal pay for equal work” regime. These include updates to the Equal Pay for Equal Work Guidelines and the Employment Management Guidance for Part-Time and Fixed-Term Employees.

How can we help you?

I'm looking for advice Subscribe: I'd like to keep in touch

I'm looking for advice

Subscribe to our mailings