Data protection impact assessment
Assessing the privacy risks of new or changed processing of personal and health data, and agreeing controls before the processing starts.
Levels
- 1. Awareness
You can:
- explain when a data protection impact assessment is needed
- complete a screening questionnaire for your work
- 2. Working
You can:
- help project teams complete data protection impact assessments
- describe data flows and identify the lawful basis for processing
- record privacy risks and proposed controls
- 3. Practitioner
You can:
- review and advise on data protection impact assessments for complex systems
- judge whether risks are acceptable and recommend controls
- decide when to escalate high risks for senior or regulator review
- 4. Expert
You can:
- set the organisation's data protection impact assessment process and standards
- give the final advice on the highest-risk processing, such as large-scale data sharing or AI
- consult regulators where the law requires it
Closest ESCO skills
Contains ESCO v1.2.1 data (https://esco.ec.europa.eu/). © European Union. Reuse authorised under Commission Decision 2011/833/EU.
Role levels that expect this skill
| Role level | Role | Band | Expected level |
|---|---|---|---|
| Deputy data protection officer | Data protection officer | 8a | Practitioner |
| Data protection officer | Data protection officer | 8b | Expert |
| Senior data protection officer | Data protection officer | 8c | Expert |
| Senior information governance officer | Information governance officer | 5 | Working |
| Information governance lead | Information governance officer | 6 | Practitioner |
| Information governance manager | Information governance officer | 7 | Practitioner |
| Head of information governance | Information governance officer | 8a | Practitioner |