The GDPR rightly puts the interest of the Data Subject at the heart of the regulation. Data Privacy Impact Assessment or DPIA is the process of assessing the impact on the privacy of the subject, whose data is being processed. The objective is to understand what adverse impact the processing of the data will have on the Data Subject. This will need to be carried out as part of an integrated process for all projects and programmes. Working in the public sector, our consultants have years of experience of carrying out Privacy Impact Assessments and can help organisations in this area.