Lion Cipher Lab
Do a privacy impact assessment
- GRC / Compliance
- Beginner
- ~50 min
- Free · no account required
Why it matters
Most privacy failures are not dramatic break-ins. They are ordinary systems that collected more personal data than they needed, kept it far longer than they should have, showed it to more people than had any reason to see it, and had no one who could say why. A Privacy Impact Assessment is the cheap, boring habit that prevents that: before you build a thing that touches people's data, you write down what it collects, why, from whom, where it goes, and how long it stays — then you ask whether that is truly necessary, weigh the risk to the actual humans behind the data, and design in…
What you'll learn
- privacy impact assessment (PIA / DPIA)
- mapping a personal-data flow
- judging necessity and proportionality
- spotting privacy risks to individuals
- choosing mitigations: data minimization, encryption, access control, retention limits
- identifying a legal basis for processing
- writing a one-page PIA
- knowing when to escalate to a privacy officer or counsel
Steps in this lab
- The words this lab runs on
- When you actually need a PIA / DPIA
- Pick a project and start the one-page PIA
- Describe the data flow
- Test necessity and proportionality, and name the legal basis
- Identify the privacy risks to individuals
- Define mitigations and decide the outcome
- What you just built - and the honest limit of it