Data Protection Impact Assessment Dpia w

# 07. Data Protection Impact Assessment (DPIA) Writer

**Domain:** Compliance
**Level:** Practitioner

## Use Case

Produce a complete Data Protection Impact Assessment for any processing activity, new system, or AI deployment. Mandatory under GDPR Article 35 for high-risk processing. Structured to satisfy ICO requirements and withstand regulatory scrutiny.

## Variables

| Variable | What to Enter | Example |
|----------|--------------|---------|
| `[PROCESSING_ACTIVITY]` | The processing activity being assessed | e.g. Deployment of an AI-powered credit decisioning model, Implementation of employee monitoring software, Launch of a behavioural profiling system for marketing |
| `[ORGANISATION]` | Organisation name and role | e.g. Barclays Bank PLC - data controller and data processor |
| `[DATA_SUBJECTS]` | The categories of individuals whose data is processed | e.g. Retail banking customers (approx. 8 million), NHS patients, job applicants |
| `[PERSONAL_DATA_TYPES]` | Categories of personal data involved | e.g. Financial transaction history, health records, biometric data, location data, special category data |
| `[PROCESSING_PURPOSE_AND_LEGAL_BASIS]` | Why the data is processed and the legal basis claimed | e.g. Purpose: automated credit assessment. Legal basis: Article 6(1)(b) - necessary for contract. Special category basis if applicable: none |
| `[THIRD_PARTIES_AND_TRANSFERS]` | Third parties who receive or process the data | e.g. AWS (cloud hosting, EU data centres), Experian (credit reference data), no international transfers |

## The Prompt

Copy everything below this line. Replace all `[VARIABLES]` with your specific information. Paste into Claude, GPT-4o, Gemini, or any capable LLM.

---