Glossary · Safety and data
abbreviationalso: Data protection impact assessment
A process under UK and EU data protection law for identifying and reducing the risks of processing personal data. It may be required before using AI on certain kinds of personal data.
In practice
Before using AI on personal data, particularly sensitive data or anything that could significantly affect people, a business may need a data protection impact assessment. It sets out what data is used, why, the risks to individuals and the measures that reduce them. Even when not strictly required, a short DPIA is a useful way to think through an AI use case. Take advice for your specific situation.
Not always. It depends on the data and the use. Processing that is likely to result in a high risk to individuals may require one under UK and EU data protection law. Check the ICO's guidance or take legal advice for your situation.
From AI curious to AI capable
Start with an audit. You will know exactly where AI fits, what to do first and what it should give back. Your report looks something like this.
Prepared for
your business
What Claude can really do
Contents
Every opportunity mapped, scored and turned into a costed Claude roadmap.