DPIA report generation

[failys]

DPIA reports can be generated automatically as the model contains data that complements the ICO's DPIA draft template as follows:

• Step 1: Identify the need for DPIA
  CAIRIS project meta-data can summarise the project aims and what the DPIA process involves

• Step 2: Describe the processing
  DFDs and data mapping table can describe the nature of the processing.
  Asset information can describe the scope of the processing.
  Personas can describe the expectations of data subjects, thereby specifying the context of processing.
  Use cases can describe the purpose of the processing.

• Step 3: Consultation process
  The argumentation models underpinning personas (and related data) provide the rationale that illustrates an appropriate consultation process took place, i.e. to build the personas.

• Step 4: Necessity and proportionality
  Tables describing goals that indicate the purpose of personal information process can illustrate lawful processing and data minimisation.

• Step 5: Identify risk
  CAIRIS risk analysis elements can be used to present privacy risks

• Step 6: Measures to reduce risk
  CAIRIS risk responses can describe the measures taken to reduce risks.