This practical course explains how and why law firms should carry out data audits and Data Protection Impact Assessments (DPIAs), focusing on proportionate compliance rather than technical or overly legalistic approaches.

The session demystifies what a data audit is, how it differs from a DPIA, and when each is required under UK GDPR.  The course also explores when a DPIA is required, how to approach it in a law firm context, and how DPIAs support better decision-making around new systems, technology, outsourcing, and changes to working practices.