Item Name/position/date Notes Measures approved by: If applicable Integrate actions back into project plan, with date and responsibility for completion Residual risks If applicable If accepting any residual high risk, approved by: consult the ICO before going ahead Data Protection Officer DPO should advise on compliance, step 6 measures and (DPO) advice provided: whether processing can proceed DPO should provide advice Summary of DPO advice: Consider completion and evidence in the GDPR Workbook. Consider whether culture / implementation of SOPs and other measures takes place – are all the protocols implemented in practice. Can you confirm this? Is there anything additional that needs to be done? DPO advice accepted If overruled, you must explain or overruled by: your reasons Comments: If applicable Consultation responses If applicable If your decision departs from reviewed by: individuals’ views, you must explain your reasons Comments: If applicable This DPIA will be kept The DPO should also review under review by: ongoing compliance with DPIA
Item Name/position/date Notes Measures approved by: If applicable Integrate actions back into project plan, with date and responsibility for completion Residual risks approved by: If applicable If accepting any residual high risk, consult the ICO before going ahead Data Protection Officer (DPO) advice provided: DPO should advise on compliance, step 6 measures and whether processing can proceed DPO should provide advice Summary of DPO advice: Consider completion and evidence in the GDPR Workbook. Consider whether culture / implementation of SOPs and other measures takes place – are all the protocols implemented in practice. Can you confirm this? Is there anything additional that needs to be done? DPO advice accepted or overruled by: If overruled, you must explain your reasons Comments: If applicable Consultation responses reviewed by: If applicable If your decision departs from individuals’ views, you must explain your reasons Comments: If applicable This DPIA will be kept under review by: The DPO should also review ongoing compliance with DPIA