Updated Data Protection Impact Assessment (DPIA) procedure
The Executive Leadership Team has recently approved updates to the Data Protection Impact Assessment (DPIA) procedure.
Understanding what a Data Protection Impact Assessment (DIPA) is
A DPIA is “an assessment of the impact of the envisaged processing operations on the protection of personal data”.
It is a process to help identify and minimise the data protection risks of a project. It enables you to map out the process from start to finish, to identify any risks to personal data, and to document what measures have been put into place to eliminate or reduce those risks.
The DPIA procedure at LJMU has been updated to include a new DPIA screening form, a short form template for situations when a full DPIA is not required, an updated Information Security Questionnaire for use when engaging a new supplier to process personal data, and a flowchart to easily show the DPIA due diligence process.
Policies can be accessed via the LJMU Policy Centre. If you have any issues accessing the policies, please do not hesitate to contact policies@ljmu.ac.uk for further support.
