We’re pleased to introduce an updated Data Protection Impact Assessment (DPIA) form and process, now available for use.
Following feedback from staff across services, we’ve reviewed the existing DPIA approach and made a number of improvements to ensure it is:
- simpler to complete
- more user-friendly and intuitive
- better aligned to how services operate in practice
- clearer on what information is required and when.
We’ve reduced duplication, improved guidance within the form, and structured the process to help you complete DPIAs more efficiently while still meeting our UK GDPR obligations.
DPIAs are still registered in the same way by competing the form on the Data Protection Impact Assessment page on our Derbyshire.
The new DPIA form replaces the previous version with immediate effect and it should be used for all new projects, systems, and changes involving personal data.
Existing DPIAs already in progress can continue using the previous version (unless a review/update is needed).
We recognise that DPIAs can feel complex, so the IG Team is here to support you. If you’re unsure whether a DPIA is required or need help completing one, please get in touch at cst.infogov@derbyshire.gov.uk.
Thank you to everyone who provided feedback - your input has directly shaped this improved approach. We hope the new process makes DPIAs more accessible and easier to complete, while continuing to support good data protection practice.