Since the introduction of the AVG, municipalities are required to assess the risks of data processing operations with a high privacy risk. A Data Protection Impact Assessment (DPIA) provides a risk assessment of the use of personal data and indicates what measures are needed.
Ester Weststeijn, mayor of Rozendaal and member of the IBD Advisory Board and the VNG Information Society Committee, explains why DPIAs are important in an article in iBestuur: "As municipalities, we stand for the protection of our residents' data. They entrust us with their personal data so that we can offer them the right help and support. The DPIA helps us identify risks in advance and take measures.'
Conducting a DPIA in your municipality can be complex and time-consuming. Cooperating with other municipalities and sharing knowledge and experiences facilitate this process. Sylvia Meinders, Data Protection Officer for the municipality of Enschede, emphasizes the importance of cooperation in the article, "A lot of processes that we perform, other municipalities also perform.
