DPIA_TEMPLATE.md

DPIA Template

Complete this Data Protection Impact Assessment for every material release. Upload the signed PDF to MLflow under risk_prod.mlflow.dpia.

1. Summary

• Purpose of processing:
• Lawful basis:
• Data subjects and regions:
• Description of data flows:

2. Necessity and Proportionality

• Measures to ensure data minimisation:
• Purpose limitation alignment with Agents.MD:
• Storage limitation and retention schedule:

3. Risk Assessment

Risk	Likelihood	Impact	Mitigation	Residual Risk

4. Special Category and Protected Attributes

• Special categories processed:
• Handling approach (including fairness evaluations):
• Safeguards for automated decisioning:

5. Cross-border Transfers

• Regions impacted:
• Transfer Impact Assessment summary:
• Technical and organisational controls:

6. Consultation

• DPO review outcome:
• Risk stakeholder approvals:
• Date of next review:

7. Sign-off

• Product owner:
• Data governance lead:
• Risk director:

---

Attach references to MLflow runs, Unity Catalog assets, and approval artefacts.