ICO Consultation on Privacy Impact Assessments

The ICO (UK Information Commissioner's Office) has produced a short questionnaire on the use of privacy impact assessments (PIAs) by organisations in the UK.

PIAs have been promoted by the ICO since 2007, and the most recent version of the PIA Handbook was published in 2009.

The European Commission's proposal for a new Data Protection Regulation could make 'data protection impact assessments' mandatory in some circumstances. This could have a significant impact on organisations in all sectors and so the ICO is interested in hearing from organisations about their practical experiences of using these assessments.

The evidence the ICO collects will help them to influence the legislative process, in order to ensure that future PIAs work well in practice and deliver genuine benefits to organisations and citizens.