DPIA / Data Protection Reviews

Data Controllers/Principal Investigators/Sponsors are advised to conduct data protection reviews of ongoing projects at regular intervals.

The 'Data Protection Impact Assessment' in particular is a living document, meaning that it must reviewed regularly, in the context of any changes to the study, or any external developments which may affect the study.

This Sample Checklist (drafted November 2020) may provide a useful starting point to conducting a data protection review.