Data Protection Impact Assessment

In this session we will simulate a Data Protection Impact Assessment (DPIA). This will be done in the form of a role-play game. We count on your active participation, preparation, and activity for this exercise to be a great success!

Preparation material

• Read the case description
• Watch this short video
• Read the role cards with guiding questions
• Study the concept cards
• Recommended reading on the Future Learn platform, accessible via this link.

Take the following steps to prepare before the roleplay:

1. Study the case and role card for your role and get into your role by visualising your character. Use the following questions: What kind of person is he/she? What does he/she want to achieve? Who asked him/her to join?
2. Study the questions on the role card and check which key concept cards are relevant for your role.
3. Keep in mind that the aim of the roleplay is to work together on privacy by design. So, think how you can contribute in a constructive way.

In the week before the session a role will be assigned to you. There are nine roles:

1. Researcher
2. Information security expert
3. Legal Know-how
4. Research data management expert
5. Communications professional
6. Representative of the data subjects
7. Ethics know-how
8. Representative of the insurance company
9. PhD supervisor

Aim of the assignment

1. Discuss the risk(s) for the data subjects.
2. Decide which technical or organizational measures should be taken to protect personal data. Take into consideration how the measures can be transparent.
3. Develop a common conclusion whether the research should be carried out.

Recommended: To understand the background and the setting better, please prepare your participation by looking at the e-learning material on ‘privacy in research’. You can access it via the Future Learn platform using this link. This is high quality material that was developed at the UG to inform the users about essential questions relating to privacy in research. Remember it also when you develop your projects later.