A DPIA is a well-ordered list of data processing methods and purposes A DPIA is also a proactive measure to safeguard and protect data using certified security mechanisms. DPIA will help organisations to: Identify Fix problems at an early stage Reducing the related costs Damage to reputation

1. Data protection impact assessment (DPIA)

2. What is DPIA?
www.seersco.com
A DPIA is also a proactive measure to safeguard and protect data using certified security
mechanisms.
DPIA will help organisations to:
• Identify
• Fix problems at an early stage
• Reducing the related costs
• Damage to reputation
A DPIA is a well-ordered list of data processing methods and purposes

3. High Risk Processing Activities
www.seersco.com
Processing activities that are likely to result in a high risk:
• Systematic and extensive processing activities
• Large-scale processing of special categories of data or personal data relating to criminal
offense
• Large-scale, systematic monitoring of public areas (CCTV).

4. How can we reduce Risk?
www.seersco.com
If we need concrete set of processing we can follow the points to reduce high risk:
• Evaluation or scoring
• Automated decision making with legal or similar significant effects
• Systematic monitoring
• Sensitive data
• Data processed on a large scale
• Datasets that have been matched or combined
• Data concerning vulnerable data subjects
• Innovative use or applying technological or organisational solutions
• Data transfers across borders outside the European Union

5. The problem
www.seersco.com
 A description of the processing operations and the purposes1
The DPIA will contain:
An assessment of the necessity and proportionality of the processing2
An assessment of the risks to individuals3
 The measures in place to address risk, including security4

6. Profiling
www.seersco.com
It is the recording and analysis of a person’s physical, psychological and behavioural
characteristics to identify patterns and classify/categorise the individuals based on those
characteristics.
The GDPR defines profiling as:
“any form of automated processing of personal data consisting of the use of personal data to
evaluate personal aspects relating to the natural person, in particular to analyse or predict
certain aspects concerning that natural person's performance at work, economic situation,
health, personal preferences, interests, reliability, behaviour, location and movement.”

7. Threats of Profiling
www.seersco.com
Profiling and automated decision-making can pose significant risks for individuals’ rights and
freedoms which require appropriate safeguards.
Profiling can result in:
• Stereotyping
• Social segregation
This can pose:
• A threat to their freedom to choose
• It can lead to inaccurate predictions
• Denial of services and goods
• Unjustified discrimination in some cases

8. 24 Holborn Viaduct,
London
EC1A 2BN
info@seersco.com www.seersco.com