Instructions for data protection impact assessments
The purpose of these instructions is to support KI’s operational units in their performance of an impact assessment. The instructions explain what such an assessment involves, if and when one must be carried out, and how to perform it.
- Diary number: 1-282/2022
- Decision date:
- Validity period: Until further notice
- Decision: Head of legal office
- Document type: Instructions
- Handled by department/unit: Juridiska avdelningen
- Preparation with: Legal Unit and Information Security Unit
Summary of the rules
The instructions are for everyone involved in the processing of personal data at KI. When processing personal data, the processor must decide if an impact assessment is required. Appended to these instructions is a template that can be used as a basis for the impact assessment process.