PIMS-FORM-A72-9 Privacy Impact Assessment Tool

Please note: This sample shows only part of the complete Privacy Impact Assessment tool.

PII Asset

Risk Owner

(blank)

(blank)

Risk Level Calculated

Privacy Impact Assessment Workbook To refresh chart data, click on “Refresh All” on the Data ribbon.

RISK DESCRIPTION Ref PII Asset Risk Scenario Risk Owner

1 2 3 4 5 6 7 8 9 10 11 12 13 14 15 16 17 18 19 20

PRE-TREATMENT Existing Likelihood Likelihood Controls Rationale

Impact Impact Rationale

Select…

Select…

Select…

Select…

Select…

Select…

Select…

Select…

Select…

Select…

Select…

Select…

Select…

Select…

Select…

Select…

Select…

Select…

Select…

Select…

Select…

Select…

Select…

Select…

Select…

Select…

Select…

Select…

Select…

Select…

Select…

Select…

Select…

Select…

Select…

Select…

Select…

Select…

Select…

Select…

Risk Score

Calculated Calculated Calculated Calculated Calculated Calculated Calculated Calculated Calculated Calculated Calculated Calculated Calculated Calculated Calculated Calculated Calculated Calculated Calculated Calculated

Risk Level

Calculated Calculated Calculated Calculated Calculated Calculated Calculated Calculated Calculated Calculated Calculated Calculated Calculated Calculated Calculated Calculated Calculated Calculated Calculated Calculated

TREATMENT Treatment Treatment Option Action(s) Chosen Select…

Select…

Select…

Select…

Select…

Select…

Select…

Select…

Select…

Select…

Select…

Select…

Select…

Select…

Select…

Select…

Select…

Select…

Select…

Select…

POST-TREATMENT Post-Treatment Post-Treatment Post-Treatment Post-Treatment Post-Treatment Post-Treatment Comments Likelihood Likelihood Impact Impact Risk Score Risk Level Rationale Rationale Select…

Select…

Select…

Select…

Select…

Select…

Select…

Select…

Select…

Select…

Select…

Select…

Select…

Select…

Select…

Select…

Select…

Select…

Select…

Select…

Select…

Select…

Select…

Select…

Select…

Select…

Select…

Select…

Select…

Select…

Select…

Select…

Select…

Select…

Select…

Select…

Select…

Select…

Select…

Select…

Calculated Calculated Calculated Calculated Calculated Calculated Calculated Calculated Calculated Calculated Calculated Calculated Calculated Calculated Calculated Calculated Calculated Calculated Calculated Calculated

Calculated Calculated Calculated Calculated Calculated Calculated Calculated Calculated Calculated Calculated Calculated Calculated Calculated Calculated Calculated Calculated Calculated Calculated Calculated Calculated

Likelihood The following table should be used to decide upon the most appropriate likelihood for a particular risk.

LIKELIHOOD DESCRIPTION 1 2 3 4 5

Improbable Unlikely Likely Very Likely Almost certain

SUMMARY Has never happened before and there is no reason to think it is any more likely now There is a possibility that it could happen, but it probably won't On balance, the risk is more likely to happen than not It would be a surprise if the risk did not occur either based on past frequency or current circumstances Either already happens regularly or there is some reason to believe it is virtually imminent

Impact The following table should be used as guidance to help to decide upon the correct impact rating for a particular risk.

IMPACT LEVEL

IMPACT AREAS

Rating Description Financial

Health and Safety

Impact on Reputation

Legal Impact

Other Potential Impacts

1 2 3

Negligible Slight Moderate

No loss Less than £10 Up to £100

No harm No impact Minor harm Slight embarrassment Significant, but non life- Local embarrassment threatening injuries

No impact [Specify impact] Minor breach of law [Specify impact] Significant illegality without [Specify impact] prison or major fines

4

High

Up to £10,000

Serious injury

Severe, but temporary damage to reputation

5

Very High

More than £10,000

Potential for death

Reputation is ruined permanently

Potential major prosecution [Specify impact] with threat to liberty and high fine May lead to lengthy prison [Specify impact] term or very large fines