Legal and risk / Free editable template

DPIA screening decision tree template

A data protection impact assessment is needed when processing is likely to result in a high risk to people. This board screens a new customer analytics app against nine common risk criteria, then follows a decision tree: is it on the ICO high-risk list, does it meet two or more criteria, and after mitigation is there still a high risk that means consulting the ICO before starting.

This is a planning example, not legal advice. Check your own policies, advisers and the local rules that apply to you.

Use this template →See the example ↓

No account needed · Opens as your own editable page

Preview the dpia screening decision tree

View full-size preview ↗
DPIA screening decision tree example showing nine risk criteria with three ticked, decision tree with four outcomes, when to consult the regulator
Everything in this example is editable. Replace the labels, move the shapes and adapt the layout to your work.

How to use this template

  1. Screen early

    Run the screening as soon as the project idea is clear, before design decisions are fixed and while changes are cheap.

  2. Tick the criteria

    Check the project against each criterion. Two or more usually means a DPIA, and so does anything on the regulator's high-risk list.

  3. Record the outcome

    Whatever the answer, record the screening and the reasons. If a DPIA is needed, involve your DPO and plan the mitigations.

Questions about this template

Can I tick the risk criteria for my own project?

Yes. Rename the project, tick each criterion that applies in the editor and update the screening result to show how many are ticked.

Do I need an account to use it?

No. Open the template and edit it in your browser. Your work saves on this device. An account is optional if you want to sync your workspace.

Can I export the finished diagram?

Yes. Use Export in the editor to save a PNG, SVG or PDF, or download an editable .epicdraw backup.

More Legal and risk templates →