Skip to content
gr0wpath
Log In

Privacy by design for new processes: data mapping, defaults and DPIAs

For managers, project leads and process owners who design or change a business process that uses personal data, such as a new tracking system, recruitment step, customer form or supplier tool. Prerequisite: 'Personal data from collection to deletion', which introduces DPIA indicators. You'll map the personal data a new process will use, screen it against the DPIA triggers and record the decision, set privacy-friendly defaults, assess risks to people by likelihood and severity and choose measures, and record the outcome, including when the ICO must be consulted. Jurisdiction: UK (UK GDPR, ICO guidance, which the ICO says is under review after the Data (Use and Access) Act). This course is not legal advice and doesn't make you a data protection officer; your DPO or privacy lead advises on your DPIAs.

Level
Intermediate
Length
About 120 minutes
Contents
5 lessons · final exam
Status
Published · updated 10 Oct 2026
Request a demoMore Company-wide courses

Skills you'll practise

  • Map the personal data a new process will use: what, why, who can access it, where it goes and how long it is kept
  • Screen a new process against the DPIA triggers and record whether a DPIA is required and why
  • Apply data protection by default to the amount of data collected, the extent of processing, the storage period and accessibility
  • Assess risks to individuals by likelihood and severity and choose measures that reduce them
  • Record the DPIA outcome: measures, residual risk, DPO advice, whether the ICO must be consulted and when to review

Course outline

  1. 1.Map the personal data a new process will useLesson · 22 min
  2. 2.Screen a new process against the DPIA triggers and record the decisionLesson · 24 min
  3. 3.Apply data protection by default to amount, processing, storage and accessLesson · 20 min
  4. 4.Assess risks to individuals by likelihood and severity and choose measuresLesson · 24 min
  5. 5.Record the DPIA outcome, consult the ICO when required and reviewLesson · 12 min
  6. 6.Privacy by design for new processes: data mapping, defaults and DPIAs: knowledge checkKnowledge check · 14 questions
  7. 7.Privacy by design for new processes: data mapping, defaults and DPIAs: practical exerciseKnowledge check · 1 question
  8. 8.Final exam10 questions · passing it completes the course, so people who already know the material can test out

Sources it draws on

The lessons and questions are written from these references, so learners can go back to the original.

See it with your own jobs and topics

Tell us about your team and we'll walk you through setup, from choosing jobs to your first skills check.

Request a demoLog in