New Data Protection Impact Assessment (DPIA) form

We are pleased to introduce a new and improved Data Protection Impact Assessment (DPIA) form, now available on Connects.

This form has been developed to support services across the Council in identifying and managing potential data protection risks at the earliest stage of any project, initiative, or procurement of a new system.

What does the new form do?

The new DPIA form has been designed to:

• Act as an initial assessment tool, helping you determine whether a full DPIA is required
• Capture key details of your proposal, project, or system
• Allow you to submit a completed DPIA alongside your request, where applicable
• Enable early engagement with the Information Governance Team for advice and support
• Support compliance with UK GDPR and Data Protection Act 2018 requirements

Not sure if you need a DPIA?

The form can still be used as a screening tool.

If you are unsure whether your activity requires a DPIA, simply complete the form with as much detail as possible. The Information Governance Team will:

• Review your submission
• Advise whether a DPIA is required
• Support you through next steps

How to access the form

The DPIA form is now available via Connects and should be used as part of your project or procurement process.

Please ensure the form is completed at the earliest stage possible and submitted alongside any supporting documentation.

Contact dataprotectionofficer@north-ayrshire.gov.uk if you have any further queries.

Published June 01, 2026