How to master the DPIA process - the organisational perspective

The DPIA process is important. In this podcast we look at it from the organisational perspective. How do you make it work - not legally or technically - but organisationally.

You find the presentation here:

  • Supports good decision-making,
  • Good governance
  • Compliance
  • Often no DPIA is required – documents the non-action
  • It is also good practice to do a DPIA for any other major project which requires the processing of personal data. (ICO)
However, data protection often doesn't now when a new system is coming on board. 

It is a cultural issue and we have to do many things to chance it:
  • Training and awareness
    • Don’t forget VIP’s
  • Let’s put it in a policy (and get it out there)
  • Hybrid organisation and ambassadors
  • We have a process (or more)
  • We have buy-in
  • Ask…
That is what you'll learn about in this podcast.

Your host: Jacob Høedt Larsen, follow me on Linkedin for more news and views on compliance and privacy:

Sustainable Compliance is brought to you by Wired Relations - read more about it here:

Wired Relations is a GRC solution - tailored for privacy and information security.

We help organisations turn fragile privacy and information security into sustainable GRC programmes.

We focus on four things:
  • Ease-of-use: You don’t need consultants to implement Wired Relations and you don’t need training to use it.
  • Collaboration: Privacy and infosec is a team sport. We make it easy to collaborate.
  • Overview: Privacy and infosec is complicated enough as it is. Wired Relations makes it easier to get an overview - not harder.
  • Organising for GRC: The trick is to organise your processes and workflows so that you can sustain your programme.
How to master the DPIA process - the organisational perspective
Broadcast by