Assessment tools to support data protection implementation

Assessment tools to support data protection implementation

Here you will find privacy assessment tools for different situations.

Data Privacy Impact Assessment (DPIA)

The purpose of a data protection impact assessment (DPIA) is to identify, assess and manage risks related to the processing of personal data. Before you start collecting personal data you will need to evaluate if DPIA is necessary.

DPIA is mandatory in some situations before you start data processing.

An assessment form, the so-called initial mapping, should always be completed before you start processing personal , to check whether an impact assessment is needed (for a system, application, process, study, etc.).

Do the following

1. Check if DPIA is mandatory: template is in UNO
2. Carry out an impact assessment: template is in UNO
3. Consult the Data Protection Officer (tietosuoja(at)jyu.fi) if university of Jyväskylä is data controller (or joint data controller in projects) and if it seems that data processing will result in high risks to the research participants.
4. Submit the final version and later updates to the Registry Office (a research notification and a data privacy notice will also be submitted to the Registry Office) kirjaamo@jyu.fi.

Ģ��ֱ��

Assessment tools to support data protection implementation

Data Privacy Impact Assessment (DPIA)

Check before you start personal data processing is DPIA mandatory?

New systems and applications for personal data processing