PRV-250Privacy & Data Protection

DPIA and PIA: Running One That Changes a Decision

Most impact assessments are paperwork done after the decision. Run a DPIA that actually changes the design.

6 lessons About 3.5 hours 3 ALCs Certificate on completion

Prepares you for: CIPP/E · CIPM

What you'll be able to do

  • Decide when a DPIA is required using clear screening triggers
  • Assess risks to people, not just to the organization
  • Propose mitigations the team will actually adopt
  • Record the decision and who accepted the remaining risk
You finish with

A completed DPIA and screening trigger list

What's in it. A completed DPIA on a realistic case with mitigations that were actually adopted, plus a screening trigger list.

You build it lesson by lesson, using your own organization, and submit it for your certificate. It's yours to keep and adapt.

Who it's for

Privacy managers, DPOs and product owners of new systems or features.

What's inside

  1. Part 1Where the requirement comes from 20 min
  2. Part 2How small teams and enterprises meet it 17 min
  3. Part 3The method, step by step 22 min
  4. Part 4Hands-on lab: small team choose one 90 min
  5. Part 5Hands-on lab: enterprise choose one 120 min
  6. Part 6Finish and submit your deliverable 18 min

Built for your size

The requirement is the same everywhere. How you meet it depends on who you have. You pick the lab that matches your organization.

Small team or early-stageDPIA as a product design conversation.
EnterpriseDPIA as a gated intake process with legal sign-off and a register.

How you earn the certificate

Submit your finished deliverable, which is scored against a published rubric, and pass a short scenario quiz. Your certificate goes to your wallet and can be checked by anyone on the public register.

Ready to build a completed DPIA and screening trigger list?6 lessons, about 3.5 hours. Start whenever you're ready.
Join and enroll