On 30 April 2026, the Department of Personal Data Protection issued the Personal Data Protection Guideline: Data Protection Impact Assessment (DPIA), which provides practical guidance on when and how organisations should conduct DPIAs under the Personal Data Protection Act 2010 (“Act”). This article outlines the key legal requirements, and business implications of conducting DPIAs for organisations.
Data Protection Impact Assessment (DPIA) Guidelines
