Services
DPIA and AI Act assessment
A data protection impact assessment, with the AI Act fundamental rights impact assessment where needed.
For whom
Cities, public social welfare centres, intermunicipal companies, schools and hospitals, and organisations deploying AI.
Why now
- A DPIA is mandatory when processing is likely to result in a high risk (GDPR Article 35), for example large-scale processing of health data or systematic monitoring. Many DPO services advise on DPIAs but do not write them.
- Public bodies deploying high-risk AI systems must assess the impact on fundamental rights from December 2027; that assessment builds on the DPIA.
What you get
- Complete DPIA following an established method (based on the French CNIL's PIA framework, adapted to the Belgian Data Protection Authority).
- Risk analysis with measures and residual risk, ready for your DPO's advice.
- Optional: fundamental rights impact assessment (AI Act Article 27), building on the DPIA.
- Report in Dutch, French or English.
Not included
- The DPO role and the decision on the processing; those stay with your organisation.
- Legal advice.
Frequently asked questions
- We already have a DPO.
- Good: your DPO advises on the DPIA, I write it. Your DPO stays independent and the DPIA actually gets finished.
- Does our AI application fall under the AI Act?
- That is the first step of the assessment. If it is not a high-risk system, you get that with the reasoning and pay only for the DPIA.