Privacy, data protection & cybersecurity compliance · Core
Data-protection impact assessment
Also called: DPIA, privacy impact assessment, PIA
ELI5
A structured assessment of privacy risks for processing likely to create high risk.
Used in conversation
“Counsel wants data-protection impact assessment clarified before anyone signs.”
Pitch context
You will see “Data-protection impact assessment” in board papers, contracts, policies, risk registers and compliance reports when the discussion reaches privacy, data protection & cybersecurity compliance.
Why it matters: In privacy, data protection & cybersecurity compliance, a loose definition can change rights, obligations, approval, disclosure or enforceability.
Caution
Meaning, enforceability and required process vary by jurisdiction and agreement; this definition is not legal advice.
Sources & evidence · 3
Direct term-level sources and supporting source families.
- National Institute of Standards and Technology — Computer Security Resource Center GlossaryDirect source · primary · checked 2026-08-16
- OECD — G20/OECD Principles of Corporate Governance 2023Supporting source family · institutional · checked 2026-08-16
- U.S. Securities and Exchange Commission — EDGAR and filing resourcesSupporting source family · primary · checked 2026-08-16