← Business Document Studio
Data protection & privacy

Data Protection & DPIA Intake Worksheet

An offline intake tool for screening high-risk processing and assembling the facts needed to prepare a defensible DPIA.

Free working resourceEditable Word document (.docx)KenyaReviewed 31 July 2026
Who it is for
  • Businesses launching products, profiling, biometrics, monitoring or new data uses
  • Privacy, security, product, operations and legal teams scoping a DPIA
  • Controllers and processors documenting systems, vendors, transfers, risks and controls
What it does not do
  • Serving as a completed DPIA or formal risk acceptance
  • Automatically establishing the lawful basis or necessity of processing
  • Commencing high-risk processing before required assessment and approvals
What is included

A structured starting point you can control.

  1. 01

    Project ownership and high-risk screening

  2. 02

    Processing description, personal-data categories, systems and data flow

  3. 03

    Purpose, lawful basis, necessity, proportionality and rights controls

  4. 04

    Risk record, consultation, decision, residual-risk and review fields

Use offline; do not upload confidential information.

The resource is designed to be downloaded and completed within your own controlled environment. It is a general working aid, not legal advice, a compliance certification, an executable agreement or a prediction of any regulator’s decision.

When the facts need judgment

Turn the completed working aid into a defined legal mandate.

Send a short, non-confidential scope request. The firm ordinarily responds within one business day and will confirm conflicts, engagement terms, scope and fees before substantive review.

Request a scope and fee
Important notice.

No duty to update this resource is assumed. Check current official sources and obtain advice on the complete facts before acting. Read the full disclaimer.