Free tool · Step 1 · Assess
Do I need a DPIA?
Twelve questions, about three minutes. Each one maps to a criterion the UK regulator uses to decide whether processing is likely to be high risk. Answer for one project or system.
Your answers stay in your browser: nothing is sent, stored or emailed. Indicative only — not legal advice.
Recommended next step
This result is indicative, based only on your answers, and is not legal advice. The regulator’s guidance says that if you are in any doubt, you should do a DPIA. Your organisation remains responsible for the decision; record it either way.
About this check
How the answer is worked out
What does this check look at?
It asks about the three types of processing for which UK GDPR always requires a DPIA, and about the regulator's own list of processing likely to result in high risk, such as innovative technology including AI, data matching, biometrics, tracking, and targeting children or vulnerable people. Some items require a DPIA on their own; others do when combined with another criterion.
Is the result a legal decision?
No. It is an indicative screening based only on your answers. Your organisation remains responsible for deciding whether a DPIA is needed and for recording that decision. The regulator's guidance says that if you are in any doubt, you should do a DPIA. A DPIA Screening from £297 records the decision in writing.
Do you keep my answers?
No. The check runs entirely in your browser. Nothing you enter is sent to VisionXY7 or anyone else, and nothing is stored once you close the page.
Next step
Need it in writing?
A DPIA Screening gives you a written Screening & Scope Statement after two focused hours. If a DPIA is needed, step 2 is preparing it with you.