{{- if .CompanyHorizontalLogoBase64}} {{imgTag .CompanyHorizontalLogoBase64 "Company Logo" "company-logo"}} {{- else}}

Data Protection Impact Assessments

Classification	CONFIDENTIAL
Version	{{.Version}}
Published	{{.PublishedAt.Format "January 2, 2006"}}

1. Purpose

This document contains Data Protection Impact Assessments (DPIAs) conducted for processing activities that present a high risk to individuals' rights and freedoms. DPIAs are systematic assessments that evaluate the necessity, proportionality, and risks associated with data processing operations, along with the measures implemented to mitigate identified risks.

2. Records

2.{{add $index 1}} {{$assessment.ProcessingActivityName}}

Description

{{if .Description}}{{.Description}}{{else}}Not specified{{end}}

Necessity and Proportionality

{{if .NecessityAndProportionality}}{{.NecessityAndProportionality}}{{else}}Not specified{{end}}

Potential Risk

{{if .PotentialRisk}}{{.PotentialRisk}}{{else}}Not specified{{end}}

Mitigations

{{if .Mitigations}}{{.Mitigations}}{{else}}Not specified{{end}}

Residual Risk

{{if .ResidualRisk}}{{.ResidualRisk | formatResidualRisk}}{{else}}Not specified{{end}}

3. Annexes

3.1 Lexicon

Residual Risk

Low: The residual risk after implementing mitigation measures is considered low. The processing activity poses minimal risk to individuals' rights and freedoms.
Medium: The residual risk after implementing mitigation measures is considered medium. The processing activity poses a moderate risk to individuals' rights and freedoms, requiring ongoing monitoring.
High: The residual risk after implementing mitigation measures is considered high. The processing activity poses significant risk to individuals' rights and freedoms, requiring enhanced safeguards and regular review.