Data Protection Impact Assessment
SL-01A Significant Data Fiduciary must undertake a DPIA and an audit at least once every twelve months and report significant observations to the Board, and must verify that algorithmic software used for processing does not pose a risk to Data Principals' rights.
Select one to inspect.
AI-assisted citizen query handling
The assistant reduces average grievance handling time by an estimated 40%. The same outcome could be partly achieved by improving search, which would not require indexing personal data.
Indexing full grievance narratives is not proportionate to the stated benefit. A de-identified index would meet most of the need.
Residual risk across all assessments
After mitigation. The concentration in the upper-right is what the annual report must explain to the Board.
Rows are impact (severe at the top), columns are likelihood.