Data protection impact assessment (DPIA) screening checklist template

For product teams and privacy leads deciding whether a new feature needs a full DPIA under the GDPR. Data categories, lawful basis and retention are recorded, high risk processing is screened, the DPO is consulted, and the decision and reason are written down.

App: Checklist Flow for Jira
Category: GDPR and privacy
Edition: Needs a paid licence; without one it shows with a Pro badge and a preview
Items: 10 items, 6 required
Suggested for: Epic, Story, Task

Items

Describe

Item	Required
Personal data categories processed are listed	Required
Purpose and lawful basis for each purpose recorded	Required
Data subjects identified (customers, staff, children, others)	Optional

Screen

Item	Required
Checked for high risk processing: profiling, large scale special category data, systematic monitoring	Required
Retention period defined	Required
Data minimisation reviewed: nothing collected that is not needed	Optional
Transfers outside the EEA identified	Optional

Decide

Item	Required
Data protection officer consulted	Required
Decision recorded: full DPIA needed or not, and why	Required
Records of processing activities updated	Optional

Use it

In a Jira work item, open the Checklist Flow panel, then Template library in the Templates section. Find the template under its category, use Preview to see the items and Install to add it to your site's templates. From then on you can apply it to any work item, or, with a paid licence, have it added automatically by issue type.

Checklist Flow for Jira documentation
Jira checklist templates: all 49 templates