Data Protection Impact Assessment

Data Protection Impact Assessment (DPIA) is a requirement of GDPR Article 35 that compels businesses to assess the risk and impact of their processing activities.

While the CCPA does not require businesses to conduct a DPIA, the California Consumer Privacy Act (CPRA) under Section 1798.185(a)(15) requires businesses to perform an assessment on processing activities that may expose personal data to significant risks.