Becoming confident with DPIAs

What is it?

A guide to help public sector staff become more confident in undertaking Data Protection Impact Assessments (DPIAs). It gives examples of the content required in many sections of a DPIA.

Why did we create it?

• To answer common questions about DPIAs.
• Show staff that undertaking a DPIA is a collaborative process and requires input from a range of people.
• To give examples of content for multiple sections of a DPIA.
• To encourage officers to engage with information governance teams and Data Protection Officers (DPOs) when undertaking a DPIA.
  

Who should use it?

• Particularly data owners (Information Asset Owners) and project leads.
• Anyone undertaking a DPIA.
• Information governance teams – to give as guidance to their staff.

© London Office of Technology and Innovation, 2026. This work is licensed under a Creative Commons Attribution-NonCommercial-ShareAlike 4.0 International License.