Documentation

Impact assessments

Screen your activities for a DPIA, run the assessment, and assess transfers outside the EEA.

• Data protection impact assessment (DPIA)Screen each activity against the nine EDPB criteria, then run a DPIA with context, necessity, three rated risks and a dated conclusion.
• Transfer impact assessment (TIA)For data sent outside the EEA, see which transfers need a TIA and document the transfer, its tool, the laws of the destination and supplementary measures.