Privacy · HR glossary

Privacy Impact Assessment

A privacy impact assessment examines how a proposed activity could affect people's information rights and what controls are needed. Under GDPR, a data protection impact assessment has specific legal requirements in relevant cases.

Example

Before introducing employee location tracking, an employer considers necessity, alternatives, access, retention and the potential effects on workers.

What to keep in mind

Complete the assessment before deployment, not after a system is purchased and configured. Document unresolved risks and seek appropriate privacy advice where the law requires additional review or consultation.

Further reading

← Browse all HR terms