1. 01
  2. 02
  3. 03
  4. 04
  5. 05
  6. 06
  7. 07
  8. 08
  9. 09
  10. 09b
  11. 10
  12. 11
  13. 12
How-to 08

Check risky processing

Score the risk to people's rights before and after your fixes.

  • Exceldpia-template-risk-register.xlsx
DPIA Risk Register3 sheets
Inside the toolkit
Preview · 0:27 · the full 1:58 walkthrough comes with the toolkitStep 08
What it’s for

A Data Protection Impact Assessment (DPIA) describes the rights affected and the purpose, then assesses and manages the risk to them. It is mandatory only for notified Significant Data Fiduciaries. The Act does not require it of others; this toolkit recommends it.

What you fill in

  1. DPIA workbook

    Three tabs: Instructions, DPIA Risk Register and Dashboard. The Instructions tab explains what a DPIA is and who must do one.

  2. DPIA Risk Register

    Describe the activity from your data record, flag its risks, score the risk before and after your fixes, list the mitigations and name an owner and a review date.

  3. Dashboard tab

    Shows your activities by risk level before and after your fixes, and the reduction from the mitigations you have completed.

From the video

Two frames from the walkthrough. The worked example is a fictional online store.

Still from the how-to 08 video: The scenario: what a breach at the vendor would expose.
The scenario: what a breach at the vendor would expose.
Still from the how-to 08 video: Each mitigation carries a status you set.
Each mitigation carries a status you set.

Basis Act s.10(2)(c)(i); Rule 13(1); Rule 13(2). How we arrived here

Get every document, step by step

₹29,999 incl. GST One time, no subscription. Word and Excel files you edit yourself.

₹29,999 incl. GST before 14 Nov 2026₹65,000 incl. GST from 14 Nov 2026

The price rises on 14 November 2026.