1. Data Protection Impact Assessments
Do I need to send my DPIA to the ICO?
Data Protection Practitioners’ Conference 2018
#DPPC2018

2. Article 36 Prior Consultation
The focus is on the ‘residual risk’ after any mitigating measures have been taken. If your DPIA identified a high risk, but you have taken measures to reduce this risk so that it is no longer a high risk, you do not need to consult the ICO.
Data Protection Practitioners’ Conference 2018
#DPPC2018

3. Data Protection Practitioners’ Conference 2018
#DPPC2018

4. Want to ask us a question?
Go to slido.com/#DPPC2018/DPIA
Data Protection Practitioners’ Conference 2018
#DPPC2018

5. Data Protection Practitioners’ Conference 2018
#DPPC2018

6. Article 36 Prior Consultation
The controller shall consult the supervisory authority prior to processing where a data protection impact assessment under Article 35 indicates that the processing would result in a high risk in the absence of measures taken by the controller to mitigate the risk.
Data Protection Practitioners’ Conference 2018
#DPPC2018

7. Data Protection Practitioners’ Conference 2018
#DPPC2018

8. Article 36 Prior Consultation
When must controllers consult the ICO?
‘When the controller can’t mitigate the risk’ (WP248)
Data Protection Practitioners’ Conference 2018
#DPPC2018

9. Data Protection Practitioners’ Conference 2018
#DPPC2018

10. Data Protection Practitioners’ Conference 2018
#DPPC2018

11. Guide to the GDPR DPIA Awareness checklist DPIA Screening checklist
DPIA Process checklist
Data Protection Practitioners’ Conference 2018
#DPPC2018

12. DPIA consultation- closes Friday
Tell us your ico.org.uk
Data Protection Practitioners’ Conference 2018
#DPPC2018

13. Share your thoughts on DPIAs
Go to slido.com/#DPPC2018/DPIA
Data Protection Practitioners’ Conference 2018
#DPPC2018