Data Protection Impact Assessment (DPIA)
A GDPR-required assessment of high-risk data processing before it starts.
A DPIA (GDPR Article 35) is a structured risk assessment any controller must perform before launching data processing that is likely to result in a high risk to data subjects. The DPIA documents the processing, its necessity, risks and mitigations, and must be consulted with a DPO where one is required.