CYC data protection impact assessment (DPIA) screening questions
To check if you need to complete a DPIA, answer the below questions about
personal identifiable information (PII) e.g., personal data, special categories of personal data or criminal offence, conviction, or history data (COCH).
|
Ref number: |
|
|||
|
Name and Job title: |
Zoe Dunn, Head of Housing Delivery |
|||
|
Date: |
March 2026 |
|||
|
Description - Explain broadly what you aim to achieve and what type of processing of PII and/or COCH this might include. You may find it helpful to refer or link to other documents, such as a project proposal, business case, specification etc. |
||||
|
Appoint a long-term Strategic Delivery Partner to deliver multiple housing and mixed-use sites; procure a client-side professional team; move from Passivhaus certification to the Homes England Healthy Homes Standard and Future Homes Standard for new affordable homes; approve site pipeline and delivery. The aim is to deliver at greater pace, scale and efficiency with affordable homes being high-quality, low carbon, accessible, and financially sustainable.
|
||||
|
|
Yes |
No |
||
|
1 |
Are you starting a new project, system, policy etc that will involve the use of PII and/or COCH |
|
x |
|
|
2 |
Are you changing the nature, scope, context or purposes of existing processing of PII and/or COCH |
|
x |
|
|
Are you planning to carry out, already doing or changing any processing of
|
||||
|
3 |
personal data |
|
x |
|
|
4 |
special-category data (sometimes called sensitive data or data of a highly personal nature) |
|
x |
|
|
5 |
criminal offence, conviction or history data |
|
x |
|
|
6 |
data concerning vulnerable data subjects |
|
x |
|
|
7 |
biometric or genetic data |
|
x |
|
|
8 |
PII and/or COCH that could result in a risk of harm in the event of a breach |
|
x |
|
|
9 |
PII and/or COCH without providing a privacy notice directly to the individual |
|
x |
|
|
10 |
PII and/or COCH that involves preventing data subjects from exercising a right or using a service or contract |
|
x |
|
|
11 |
PII and/or COCH on a large scale |
|
x |
|
|
Are you planning to or already doing or changing
|
||||
|
12 |
use of innovative technological or organisational solutions eg AI |
|
x |
|
|
13 |
use of profiling to help make decisions on someone’s access to a service, opportunity or benefit |
|
x |
|
|
14 |
use of automated decision-making to help make decisions on someone’s access to a service, opportunity or benefit or other significant effect on them |
|
x |
|
|
15 |
use of systematic monitoring and/or systematically monitor a publicly accessible place e.g., CCTV |
|
x |
|
|
16 |
combine, compare or match PII and/or COCH from multiple sources |
|
x |
|
|
17 |
evaluation or scoring based on PII and/or COCH |
|
x |
|
If you have ticked any of the Yes boxes above, you need to complete a DPIA. For advice and support, please contact information.governance@york.gov.uk