Plus:
18. Will the personal data be processed outside of the EU?
19. Does the processing involve systematic disclosure of personal data to, or access by, third parties?
20. Will the processing involve making changes to the way personal data is obtained, recorded, held, transmitted or deleted?
21. What risk do you perceive for individuals whose personal data will be processed?
Plus:
10. Does the processing involve personal data in relation to an individual’s criminal convictions and/or offences?
11. Does the processing introduce new or additional information technologies that can reveal an individual’s identity and has the potential to affect that person’s privacy?
12. Does the processing involve children’s or other vulnerable individual’s personal data?
13. Is the personal data to be used about individuals’ health and/or social wellbeing?
14. Is the personal data about individuals of a kind likely to raise privacy concerns or expectations?
15. Will the processing require you to contact individuals in ways which they may find intrusive?
16. Does the processing involve new processes or significantly change the way in which personal data is currently handled?
17. Does the processing involve new or significantly changed consolidation, inter-linking, cross referencing or matching of personal and/or business sensitive data from multiple sources?
This does really depend but I suppose you can start off with something like this:
1. Will personal data be processed?
2. Will the processing involve the collection of new personal data about individuals?
3. Will the processing compel individuals to provide personal data about themselves?
4. Will personal data about individuals be disclosed to organisations or people who have not previously had routine access to the information?
5. Will the processing result in you making decisions or taking action against individuals in ways which can have an impact on them?
6. Will you be using information about individuals for a purpose that it is not currently used for, or in a way it is not currently used?
7. Does the processing involve you using new technology which might be perceived as being privacy intrusive?
8. Does the processing make automated decisions about individuals?
9. Does the processing involve processing of special categories of personal data?
AndySW
Plus:
18. Will the personal data be processed outside of the EU?
19. Does the processing involve systematic disclosure of personal data to, or access by, third parties?
20. Will the processing involve making changes to the way personal data is obtained, recorded, held, transmitted or deleted?
21. What risk do you perceive for individuals whose personal data will be processed?
AndySW
Plus:
10. Does the processing involve personal data in relation to an individual’s criminal convictions and/or offences?
11. Does the processing introduce new or additional information technologies that can reveal an individual’s identity and has the potential to affect that person’s privacy?
12. Does the processing involve children’s or other vulnerable individual’s personal data?
13. Is the personal data to be used about individuals’ health and/or social wellbeing?
14. Is the personal data about individuals of a kind likely to raise privacy concerns or expectations?
15. Will the processing require you to contact individuals in ways which they may find intrusive?
16. Does the processing involve new processes or significantly change the way in which personal data is currently handled?
17. Does the processing involve new or significantly changed consolidation, inter-linking, cross referencing or matching of personal and/or business sensitive data from multiple sources?
AndySW
This does really depend but I suppose you can start off with something like this:
1. Will personal data be processed?
2. Will the processing involve the collection of new personal data about individuals?
3. Will the processing compel individuals to provide personal data about themselves?
4. Will personal data about individuals be disclosed to organisations or people who have not previously had routine access to the information?
5. Will the processing result in you making decisions or taking action against individuals in ways which can have an impact on them?
6. Will you be using information about individuals for a purpose that it is not currently used for, or in a way it is not currently used?
7. Does the processing involve you using new technology which might be perceived as being privacy intrusive?
8. Does the processing make automated decisions about individuals?
9. Does the processing involve processing of special categories of personal data?