PRV-250Privacy & Data Protection

DPIA and PIA: Running One That Changes a Decision

What you leave with

A completed DPIA on a realistic case with mitigations that were actually adopted, plus a screening trigger list.

Same obligation, two realities

Early-stage and SMEDPIA as a product design conversation.
EnterpriseDPIA as a gated intake process with legal sign-off and a register.

How the course runs

  • The obligation: where the responsibility comes from, cited by section.
  • Two realities: how it is met in a small organisation and in an enterprise.
  • The method: step-by-step practice with templates and edge cases.
  • Paired labs: complete the one matching your work, read the other.
  • Artefact and assessment: submit the artefact; a rubric and a short scenario quiz decide the certificate.