The ICO launched its Privacy Impact Assessment (PIA) handbook in December 2007.
The handbook is aimed at organisations who are developing projects that might have implications for people’s privacy. It will help organisations assess and identify any privacy concerns (a Privacy Impact Assessment) and address them at an early stage, rather than leaving the solutions to bolt on as an expensive afterthought.
PIA handbook
For ease of navigation we recommend that you use the HTML version. However, there is a PDF version available. We have also produced an overview about privacy impact assessments.
The ICO PIA handbook (HTML)
The ICO PIA handbook (PDF, 113 pages)
We are keen to work closely with organisations using the PIA handbook so we can learn about their experiences and amend the handbook if necessary. We want the PIA handbook to stand the test of time so leaning from early experiences and making any necessary revisions will be essential. If you are conducting a PIA and would like to find out how the ICO can support you, contact Stephen McCartney, Head of Data Protection Promotion.
Research
A study on the use of PIAs around the world was also presented, with the PIA handbook, at the ICO’s recent conference ‘Surveillance Society: Turning Debate into Action. You can view a full copy of the study here.
The study and handbook were developed for the Information Commissioner by an international team of experts coordinated by the University of Loughborough. This is groundbreaking work and has provoked much interest with some government departments already wanting to use it.