Data protection impact assessments

Herefordshire Council ensures that a Data Protection Impact Assessment (DPIA) is completed for any new project or change in current process which will either involve a new use of personal data or will significantly change the way in which personal data is handled. The function of the DPIA is simply to ensure that data protection risks are properly identified and addressed wherever possible.

Data protection impact assessments are a legal requirement of the General Data Protection Regulations (GDPR). They are designed to ensure that organisational accountability is assured and the security and confidentiality of personal identifiable data is maintained for any new process or change in process that has an impact on the rights of individuals or the processing conditions under GDPR.

We will list on this page a summary of the data protection impact assessments which have been approved in this calendar year. If you require a copy of any of these assessments, please make your request using the Freedom of Information process.