Hogan Lovells

Key Dates

Guidance on legitimate interests (see separate entry) and draft guidance for consultation on data protection impact assessments issued on 22 March 2018.

The consultation period in relation to DPIAs closes on 13 April 2018. 


Summary

The Information Commissioner has issued draft guidance for consultation on data protection impact assessments (DPIAs).  The guidance contains a reminder that GDPR requires a DPIA to be carried out if the data controller plans to:

The ICO also expects a DPIA to be obtained in other specified circumstances, including where a controller plans to:

In addition, the ICO considers that it is good practice to carry out a DPIA in respect of any major new project involving the use of personal data.

A DPIA will not be required where a controller has already done a substantially similar DPIA, provided that it can demonstrate that the nature, scope, context and purposes of the processing are all similar.



Date Accessed: 28/05/2022