25,000+ Courses Nationwide
0345 4506120

Data Protection Impact Assessment Workshop

  • Understand all the practical knowledge needed to perform a data protection impact assessment (DPIA).
  • Successful completion of this course leads to 7 CPD/CPE points.
  • Please note - This is a practical training workshop and there is no exam.

A data protection impact assessment (DPIA) is a key risk assessment process outlined in the requirements of the General Data Protection Regulation (GDPR), as it helps organisations make an early evaluation of the impact a business process might have on the privacy of the individuals involved, and ensures compliance with the UK Data Protection Act and EU GDPR.

Organisations are required to perform a DPIA where the processing of personal data involves high risk to the rights and freedoms of individuals. In particular, a DPIA will be required for automated data processing activities, including:

  • Profiling leading to decisions that produce legal effects for the individual.
  • Large-scale processing of certain types of data.
  • Systematic monitoring of a publicly accessible area on a large scale.

The IT Governance DPIA Workshop will explain:

  • How to develop a DPIA;
  • How to implement a DPIA project; and
  • How to monitor the results and take action where required.

DPIA training workshop benefits:

Advice from experts
Classroom training gives you the ability to ask the consultant questions relevant to your organisation and benefit from their consultancy experience.

Delivered by professionals
Delivered by an experienced privacy consultant, this workshop will enable you to conduct DPIAs in your workplace.

Training tailored to your organisation
We particularly recommend this course for in-house training. You can discuss your individual organisation policies and procedures and use real life examples to bring the DPIA training to life.

Learn from anywhere
Choose whether you attend Live Online or in person at one of our training venues throughout the UK.

Who should attend this course?

Staff who have been appointed as a DPO who require training to perform the role, or individuals who would like to become a DPO.

Why choose us for your training needs?

  • We’re internationally recognised as the authority on the GDPR – our team introduced the world’s first certified GDPR Foundation and Practitioner training courses and the only ones that are ISO 17024-certificated.
  • We have trained more than 8,000 professionals on the GDPR.
  • Learn from anywhere – as a company that fully embraces flexible and remote working, we have adjusted our delivery methods to allow you to learn from anywhere. Our Classroom / Live Online delivery option enables you to attend either in person or online.
  • Trained by industry experts – our trainers are working consultants with years of practical, hands-on experience.
  • Choose the method that suits you – we offer classroom, instructor-led online, self-paced online, e-learning and in-house training options.
  • Access your training anywhere – all our course materials are provided as a digital copy, allowing you to access them anywhere and at any time. Documents will be made available 20 days before your course.
  • Business solutions to suit you – whether you’re a multinational wanting us to manage all your training needs or a small business wishing to boost your workforce skills, we offer a range of training solutions.

What’s included in this course?

  • Full course materials (digital copy provided as a PDF file); and
  • A certificate of attendance.

What equipment do I need?

You will need a laptop for the duration of your course as our course materials are provided as a PDF with comments enabled.

Course duration and times

Day 1: 09:30am – 5:00pm

Select specific date to see price, venue and full details.


While there are no formal entry requirements, this course has been designed to meet the needs of delegates who have some knowledge of data protection and the GDPR. We recommend that delegates who require an introduction to the requirements of the GDPR attend our certified GDPR Foundation training course or at minimum take our GDPR and Data Protection Act 2018 Staff Awareness E-learning Course.

Delegates on the certified GDPR Practitioner course do not need to attend the classroom workshop, as the material is already covered in the DPIA section of the GDPR P course. We do however recommend this course for in-house training at your organisation. We can train all the personnel required when completing a DPIA to ensure everyone has the adequate knowledge and understands their role and responsibility with regards to a DPIA.

Course Content

What does this training workshop cover?

  • The principles of data protection impact assessment (DPIA).
  • The legal requirements for a DPIA
  • Getting started: how to conduct a DPIA.
  • Determining whether the risk is acceptable.
  • How to develop a data protection impact assessment procedure.
  • How to create and implement more efficient project processes.
  • Monitoring the results and understanding when to take action.
  • How to track the outcomes in order to take the appropriate remedial actions.
  • Why and how to conduct a data flow mapping exercise

Exams & Certification

There is no exam for this workshop.


Is there any recommended reading?

We recommend purchasing one or more of the following:

  • EU GDPR - An Implementation and Compliance Guide
  • Data Protection and the Cloud: A Pocket Guide
  • EU GDPR Documentation Toolkit

Related Courses

Privacy Notice

In order to provide you with the service requested we will need to retain and use your contact information in accordance with our Privacy Notice. If you choose to provide us with this information you explicitly consent to us using the information as necessary to provide the requested service to you. If you do not agree please do not proceed to request the service from us.

Marketing Permissions

Would you like to receive our newsletter and other information on products and services which we think will be of interest to you by email. We will always treat your information with care and in accordance with our Privacy Notice. You are free to withdraw this permission at any time.


We work with the best