EXAMPLE ONLY - See to do a PIA” for more information “How Ref. no. Purpose of Description of the Rationale and Existing controls Assessment of residual Recommended Residual risk collecting the risk consequences that contribute to current risk mitigations or remaining despite information for the agency manage risks privacy new safeguards or individual identified enhancements R-001 What personal The app will collect App will have Business has a Medium/Moderate Put in place a Low / Minimal information the more information greater purpose for collecting process to manage Some existing app collects than is specified in functionality and the further personal clear notification and the privacy lead to information but app consent for greater customers may still not realise the statement increased policy does not collection by app monetisation, currently reflect it once purposes change has occurred but app users change may object to collection beyond current privacy policy and collection may breach law Privacy Impact Assessment Risk and Mitigation Table –
EXAMPLE ONLY - See “How to do a PIA” for more information Ref. no. Purpose of collecting the information Description of the risk Rationale and consequences for the agency or individual Existing controls that contribute to manage risks identified Assessment of residual current risk Recommended mitigations or privacy enhancements Residual risk remaining despite new safeguards R-001 What personal information the app collects The app will collect more information than is specified in the privacy statement App will have greater functionality and lead to increased monetisation, but app users may object to collection beyond current privacy policy and collection may breach law Business has a purpose for collecting the further personal information but app policy does not currently reflect it Medium/Moderate Put in place a process to manage clear notification and consent for greater collection by app once purposes change Low / Minimal Some existing customers may still not realise the change has occurred Privacy Impact Assessment – Risk and Mitigation Table
Template-3-Risk-and-Mitigation-Table-Part-2-Appendix-B.docx