privacydocs.github.io

Topic Pages - Assessments

Privacy Impact Assessments

Canada

• Government of Canada – Directive on Privacy Impact Assessment (Effective April 2010)
• OPC Canada – Expectations: OPC’s Guide to the Privacy Impact Assessment Process (Revised March 2020)

Canada - Provinces

• Government of Alberta – Alberta Health – Completing a privacy impact assessment: annotated template (Updated September 2019)
• OIPC Alberta – Privacy Impact Assessment requirements (For use with the Health Information Act; April 2010)
• Government of British Columbia – Privacy Impact Assessment Guidelines (for BC government projects; template)
• OIPC British Columbia – Privacy Impact Assessments for the Private Sector (January 2020)
• OIPC Manitoba – Privacy Impact Assessment Tool (September 2015)
• IPC Ontario – Planning for Success: Privacy Impact Assessment Guide (May 2015)
• OIPC Saskatchewan – Privacy Impact Assessment Guidance Document

International

• OAIC (Australia) – Guide to undertaking privacy impact assessments (September 2021)
• OPC New Zealand – Privacy Impact Assessment Toolkit (July 2015)

Data Protection Impact Assessments

• Article 29 Data Protection Working Party – Guidelines on Data Protection Impact Assessments (October 2017)
• CNIL – PIA Manual: Methodology, Template and Knowledge Bases (February 2018)
  • PIA software (beta; June 2021)
  • Application of PIAs to Connected/IoT Devices (February 2018)
• UK ICO – Data protection impact assessments (in brief / checklists; detailed guidance; DPIA template)
• DPC Ireland – Guide to Data Protection Assessments (October 2019)
• PDPC (Singapore) – Guide to Data Protection Impact Assessments (September 2021)

Algorithmic Impact Assessments

Canada

• Government of Canada – Algorithmic Impact Assessment (Description / Tool) (March 2021)

Non-Government

• AI Now – Algorithmic Impact Assessments: A Practical Framework for Public Agency Accountability (April 2018)

Human Rights Impact Assessments

• United Nations Office of the High Commissioner on Human Rights – Guiding Principles on Business and Human Rights (2011; see in particular principles 17-19)
• Danish Institute for Human Rights – Human rights impact assessment guidance and toolbox (August 2020)
• Danish Institute for Human Rights – Human rights impact assessment of digital activities (November 2020)

---

To suggest new topics, identify additional resources, report broken links, etc., please contact vance at datapolicy.ca

Last updated: October 24, 2021