- Businesses launching products, profiling, biometrics, monitoring or new data uses
- Privacy, security, product, operations and legal teams scoping a DPIA
- Controllers and processors documenting systems, vendors, transfers, risks and controls

Data Protection & DPIA Intake Worksheet
An offline intake tool for screening high-risk processing and assembling the facts needed to prepare a defensible DPIA.
- Serving as a completed DPIA or formal risk acceptance
- Automatically establishing the lawful basis or necessity of processing
- Commencing high-risk processing before required assessment and approvals
A structured starting point you can control.
- 01
Project ownership and high-risk screening
- 02
Processing description, personal-data categories, systems and data flow
- 03
Purpose, lawful basis, necessity, proportionality and rights controls
- 04
Risk record, consultation, decision, residual-risk and review fields
The resource is designed to be downloaded and completed within your own controlled environment. It is a general working aid, not legal advice, a compliance certification, an executable agreement or a prediction of any regulator’s decision.
Turn the completed working aid into a defined legal mandate.
Send a short, non-confidential scope request. The firm ordinarily responds within one business day and will confirm conflicts, engagement terms, scope and fees before substantive review.
No duty to update this resource is assumed. Check current official sources and obtain advice on the complete facts before acting. Read the full disclaimer.