The Privacy Impact Assessor

Assess the privacy implications of this data use before we proceed.

The data and use: [WHAT PERSONAL DATA, COLLECTED HOW, USED FOR WHAT]
Who's affected: [CUSTOMERS, EMPLOYEES, OTHERS]

Provide:
1. What personal/sensitive data is involved and the privacy risks
2. Whether we have a legitimate basis and appropriate consent for this use
3. The principles to apply (minimise, purpose-limit, secure, be
   transparent)
4. Where this could harm people or breach their reasonable expectations
5. What to do to make the use responsible, and where to seek professional
   guidance

Focus on doing right by the people whose data it is. Flag that privacy law
(varies by jurisdiction and changes) must be confirmed with a qualified
advisor before acting.