---
title: "Draft a privacy or data-protection impact assessment"
url: "https://ailawframework.com/practice/privacy-data-protection-and-cyber/draft-a-privacy-or-data-protection-impact-assessment"
type: "task"
site: "AI Law Framework"
id: "A25-T1-R6"
practice_area: "Privacy, Data Protection & Cyber"
tier: "yellow"
lawyer_review: "required"
last_reviewed: "2026-09-23"
---

# Draft a privacy or data-protection impact assessment

> Structure a PIA or DPIA from the project description: information flows, risks, mitigations and sign-off questions.

Canonical page: https://ailawframework.com/practice/privacy-data-protection-and-cyber/draft-a-privacy-or-data-protection-impact-assessment  
Last reviewed: 2026-09-23

Site index for agents: https://ailawframework.com/llms.txt

## Key facts

| Fact | Value |
| --- | --- |
| Practice area | [Privacy, Data Protection & Cyber](https://ailawframework.com/practice/privacy-data-protection-and-cyber.md) |
| Human involvement | Yellow: Lawyer and AI draft together |
| How AI is used | Structure a PIA or DPIA from the project description: information flows, risks, mitigations and sign-off questions. |
| What the lawyer must review | Check the flow map matches the actual architecture Do not sign off a generic template |
| Written for / versions | 1 jurisdiction versions below |

## Checking plan

**Lawyer review required**

- What the AI does: Structure a PIA or DPIA from the project description: information flows, risks, mitigations and sign-off questions.

## Jurisdiction versions

| Jurisdiction | Level |
| --- | --- |
| [Commonwealth](https://ailawframework.com/practice/privacy-data-protection-and-cyber/draft-a-privacy-or-data-protection-impact-assessment/commonwealth.md) | Yellow |

*Practice guidance for planning and review. Confirm current primary sources and the requirements of the actual matter. This is general information, not legal advice.*