Online or Classroom

Every course purposefully designed

How to do a Data Protection Impact Assessment

Data Protection Impact Assessments are a key aspect of the ‘Privacy by Design’ requirements under the UK GDPR.

Although ‘PIAs’ (Privacy Impact Assessments) have been around for a while, there is some confusion over when to complete a DPIA, at what stage and who actually completes them and signs them off?

On this full day workshop, we will go through every aspect of a DPIA. From best practice on designing a template DPIA through to determining ‘high risks’ and what may or may not require ICO consultation. Through a mixture of content based learning and interactive discussion we’ll explore the requirements of a DPIA and analyse a real DPIA.

Key Topics

  • Data Protection by Design
  • Ethics: What is this?
  • What is meant by ‘Data Protection Impact’?
  • What is a DPIA?
  • When do you need to complete a DPIA?
  • Structure of a DPIA and content
  • Who should complete a DPIA?
  • Process for completing a DPIA
  • Recording and presenting outcomes from a DPIA
  • How to do Risk Assessments for a DPIA
  • Risks, Controls,Assessments, Feedback
  • Who accepts risks from a DPIA?
  • Key roles needed in the process of a DPIA
  • What can the DPO ‘sign off’?

Dates & Cost


£399 plus VAT


£449 plus VAT

Timings: 10am to 4pm

Date: 27 Sep 2022
Location: Online
Date: 15 Nov 2022
Location: Online

Course tutors

All our associates are experienced information governance professionals who have been training and advising in this field for many years.

  • Philip Jones

    Course Tutor

    Philip has 40 years of information management experience in the public and private sectors both as a practitioner and at a senior management level. He was Head of Information Governance at Staffordshire Council. Philip holds a masters degree in information management and an MBA. He is a senior associate for Act Now and Chair of the Exam Panel.

  • Scott Sammons

    Course Tutor

    Scott is an information governance specialist with over 15 years of experience. He has delivered a number international projects for Act Now Training and is a senior tutor on the Advanced Certificate in GDPR Practice. His previous roles include European Data Protection Lead for a bank and GDPR Implementation lead for a council. He is a former Chair of the IRMS.

  • Susan Wolf

    Course Tutor

    Susan holds a judicial position as a Fee Paid Member of the Upper Tribunal (Information Rights). She spent ten years teaching the LLM in Information Rights Law at Northumbria University and developed their Postgraduate Certificate in Data Protection Law and Information Governance. Susan is one of the senior curriculum developers for Act Now Training.

  • Lynn Wyeth

    Course Tutor

    Lynn is the Head of Information Governance for a large local authority and has over 20 years of experience as a practitioner. She holds a post graduate diploma in Information Rights, the CISMP certificate and is an accredited HSCIPP privacy practitioner. She is the author of two books and is currently undertaking a PhD. Her experience is across GDPR, FOI and RIPA.

  • Iain Harrison

    Course Tutor

    Iain is currently an Information Governance Risk Manager for a large local authority and has over 20 years of experience. He has been delivering training for Act Now for over 7 years in GDPR and FOI for public, private and charitable organisations. His extensive experience in planning and implementation of Information Rights legislation allows him to bring training sessions to life.

  • Kirsty Squires

    Course Tutor

    Kirsty is currently a DPO for a number of local authorities and has over 15 years of experience in Data Governance. She has led the IG Project Team on transformation projects to deliver local government restructure in Northamptonshire, dealing with issues including information sharing, data protection by design and leading on training and policy development.

  • Naomi Matthews

    Course Tutor

    Naomi is a local authority lawyer and holds a judicial position as a Fee Paid Member of the Upper Tribunal (Information Rights). She has extensive experience in all areas of information compliance and RIPA. Her training has been commended by RIPA inspectors and her advice has helped many local authorities understand the law and practicalities of covert surveillance.

  • Kate Grimley Evans

    Course Tutor

    Kate is an information lawyer and holds a judicial position as a Fee Paid Member of the Upper Tribunal (Information Rights). She has worked for a number of top law firms and is the author of the leading guidance on information law matters for the museums’ sector. Kate is currently writing a chapter (on schools) for an Oxford University Press book on data protection.

What our clients say about us

    The course was invaluable. In such a short space of time, I learnt so much about data protection and its practical implications in everyday life. The speaker was extremely knowledgeable and I would strongly recommend that people attend the course if they need to have a good working knowledge of data protection. JS- Coventry City Council

    Very good course. Informative and practical. Helped to distinguish between DPIAs and audits and worked through examples to test the approach (and new found knowledge). MJ - Sheffield City Council

    What a great course - flowed well and I learnt so much. I really enjoy the act now courses online and find that everyone gets involved in answering questions and providing insight onto their own company processes. That exchange of information helps us build a smoother process in our own departments. The tutor was friendly, knowledgeable and made the course really interesting
    EF, Wm Morrison Supermarkets Plc