Skip to content
SERVICES
Data protection impact & legitimate interest assessments
DPIAs and LIAs: structured analysis of lawful bases, necessity, proportionality and effects on individuals.
When is this service relevant?
For new or materially changed processing, sensitive data, monitoring activities or processing intended to rely on legitimate interests.
Scope of support
- Screening for the need to conduct a DPIA against relevant criteria and the nature of processing.
- Description of processing operations and assessment of necessity and proportionality.
- Identification of risks to individuals’ rights and freedoms, likelihood and impact, and mitigating measures.
- LIAs addressing the legitimate interest, necessity of processing and balancing of interests and rights.
- Documentation of residual risks, review triggers and recommendations; updates following changes to processing.
DPIAs and LIAs address different questions. Selecting a lawful basis does not replace the assessment of risks and other processing requirements.