A Data Protection Impact Assessment (DPIA) describes the rights affected and the purpose, then assesses and manages the risk to them. It is mandatory only for notified Significant Data Fiduciaries. The Act does not require it of others; this toolkit recommends it.
What you fill in
DPIA workbook
Three tabs: Instructions, DPIA Risk Register and Dashboard. The Instructions tab explains what a DPIA is and who must do one.
DPIA Risk Register
Describe the activity from your data record, flag its risks, score the risk before and after your fixes, list the mitigations and name an owner and a review date.
Dashboard tab
Shows your activities by risk level before and after your fixes, and the reduction from the mitigations you have completed.
From the video
Two frames from the walkthrough. The worked example is a fictional online store.


Basis Act s.10(2)(c)(i); Rule 13(1); Rule 13(2). How we arrived here
Get every document, step by step
₹29,999 incl. GST One time, no subscription. Word and Excel files you edit yourself.
₹29,999 incl. GST before 14 Nov 2026₹65,000 incl. GST from 14 Nov 2026
The price rises on 14 November 2026.
