A structured review of how a processing activity affects privacy—often mandatory before high-risk personal-data uses, including some AI features.
A DPIA documents purpose, necessity, data categories, risks, and mitigations. It is a coordination artifact between engineering, security, and legal—not a formality.
With AI
High-risk scenarios include large-scale employee monitoring, sensitive inference, or novel profiling. Connect DPIAs to PII handling and GDPR obligations in your jurisdiction.