Perform a data protection impact assessment
Risk, compliance and governance: Perform a data protection impact assessment. Starts when: New processing. Steps: Describe processing; Assess risk; Mitigate; DPO opinion; Record. Done when: DPIA is approved with the DPO opinion. Rules that apply: UK GDPR Art 35.