All sample legal documents

Data Protection Impact Assessment

A completed fictional UK GDPR DPIA for a staff access-control camera system, with necessity, risks and mitigations.

Jurisdiction: England and Wales - completed fictional worked example

Download Sample

An editable Microsoft Word version is available from the interactive page.

Important: This sample provides general legal information only and is not legal advice. Check the law, prescribed forms and signing requirements that apply to your exact jurisdiction and circumstances before use.

# DATA PROTECTION IMPACT ASSESSMENT

Date: 8 May 2036

Parties: Hearthside Logistics Ltd

## 1. Purpose and parties

Hearthside Logistics Ltd proposes cameras at vehicle gates and secure loading areas to verify access and investigate safety incidents. The controller is Hearthside; the system will not use facial recognition, continuous audio or covert monitoring.

## 2. Facts, scope and terms

The lawful basis, retention, access controls, worker information and signage have been assessed. Images are retained for 30 days unless an identified incident requires preservation. Main risks are excessive monitoring, unauthorised access and inaccurate assumptions about a person.

## 3. Process and responsibilities

Mitigations include restricted role-based access, encryption, a monthly deletion check, a data-subject contact route, worker consultation and a documented incident response. The data protection officer must approve deployment and review this DPIA after any material change.

## 4. Evidence, records and safeguards

The parties should retain the relevant contract, notice, invoices, records and correspondence, and restrict access to personal or confidential information to those who need it. The stated amounts and dates are fictional worked-example facts and require checking against source records.

## 5. Review, escalation and outcome

If the issue is not resolved, the parties should identify the appropriate next step, which may include an internal process, mediation, court or regulator. Silence or part performance is not treated as acceptance or waiver.

## 6. Reservations and practical protections

This document is a general fictional example, not individual legal advice and not a guarantee of eligibility, liability or outcome. Where necessary, an independent professional should check the facts and current law.

## 7. England and Wales law and completion

This completed fictional sample is made on the date above under the law of England and Wales and subject to mandatory protections. It does not exclude any right, liability or remedy that cannot lawfully be excluded.

Create a version for your situation

Create a tailored DPIA