GDPR template · GDPR articles
Data Protection Impact Assessment
Framework for conducting DPIAs on high-risk processing activities per GDPR Article 35. Written for your company, citing the requirements below.
- Sections
- 6
- Requirements
- 1
- Formats
- PDF, Word
- Shelf
- 10 GDPRdocuments in all
No card needed to start.
- Cites
- Art. 35
- Formats
- PDF and Word
Sections
Each written around your company: your tools, your roles, your review dates.
- Purpose and Scope
- DPIA Threshold Assessment
- DPIA Process
- Risk Mitigation Measures
- DPO and Supervisory Authority Consultation
- Documentation and Review
Requirement it is written to
As named in the template description.
Art. 35, as named in the template description: Framework for conducting DPIAs on high-risk processing activities per GDPR Article 35.
Recent changes
Updates from official sources that name this policy. All policy updates
13 Oct 2026 · European Data Protection Board
EDPB issues statement on smart glasses and GDPR complianceConsider whether a DPIA is required for processing personal data through smart glasses, especially in sensitive contexts or when using AI features.
9 Oct 2026 · European Data Protection Board
Italian DPA fines IQVIA EUR 7 000 000 for unlawful processing of health dataReview the Data Protection Impact Assessment procedure to ensure DPIAs are carried out for high-risk processing such as large-scale health data.
17 Sep 2026 · European Data Protection Board
EDPB issues guidelines on the interplay between the DSA and the GDPRUpdate the DPIA procedure to require a DPIA when systemic risks are identified under Articles 34 and 35 DSA, as stated in the guidelines.
- GDPR5 sections
International Data Transfer Policy
CitesArt. 44–49PDF · WordCites GDPR Article 44–49, named in the template description. - GDPR5 sections
Data Retention and Erasure Policy
CitesArt. 5(1)(e) Art. 17PDF · WordCites GDPR Article 5(1)(e), named in the template description; GDPR Article 17, named in the template description. - GDPR6 sections
Data Breach Notification Procedure
CitesArt. 33 Art. 34PDF · WordCites GDPR Article 33, named in the template description; GDPR Article 34, named in the template description. - GDPR5 sections
Consent Management Policy
CitesArt. 6 Art. 7PDF · WordCites GDPR Article 6, named in the template description; GDPR Article 7, named in the template description. - GDPR6 sections
Data Subject Access Request Procedure
CitesArt. 15–22PDF · WordCites GDPR Article 15–22, named in the template description. - GDPR6 sections
Data Protection Policy
CitesArt. 5 Art. 6 Art. 25 +4 +5PDF · WordCites Art. 5, Principles of Processing (GDPR); Art. 6, Lawfulness of Processing (GDPR); Art. 25, Data Protection by Design and Default (GDPR), and 4 more.
GDPR on its own
- Documents
- 10
- Plan
- Growth
- Price
- $199 a month or $1,990 a year
Growth also covers HIPAA, so GDPR + HIPAA stays at $199 a month. Two frameworks besides HIPAA need Scale.
Your first policy is free. No card needed to start.