A Data Protection Impact Assessment (DPIA) is a process which enables the Council to identify and address data protection risks with the design, development and implementation of a new or significant change to a system, process or project that uses personal data.