Skip to content
Tools·AEPDEN
Export

AEPD template DPIA report (private sector)

The Spanish DPA’s model report for a data protection impact assessment in the private sector, in English: the sections Article 35(7) requires (description, necessity and proportionality, risks, measures) laid out as a document to fill in.

When to use itYou write a DPIA report and want the structure an authority expects.

Published by
AEPD (supervisory authority)
Written for
Spain
For
controllers, DPOs and privacy officers
Cost
free
Languages
English, Spanish
Provisions
GDPR Art. 35(7)

Description by overview.legal; the tool itself is the publisher’s.

How it connects

Model Standard Contractual Clauses (SCCs) for international transfers The Commission’s standard contractual clauses of 2021: the clauses for transfers to third countries under Article 46(2)(c), in four modules (controller or processor to controller… European Commission
Model ICO Data Protection Impact Assessment (DPIA) guidance and template The UK regulator’s step-by-step DPIA guidance with a downloadable template: screening questions to decide whether a DPIA is needed, how to describe the processing, consult, assess… UK ·ICO
Model ICO documentation templates (records of processing, Article 30) Guidance and spreadsheet templates for the record of processing activities of controllers and processors: what must be recorded, who is exempt, and templates to adopt directly. UK ·ICO
Model CNIL record of processing activities template The French DPA’s explanation of the record of processing activities with a simplified model register (spreadsheet) per processing operation, also in English. FR ·CNIL
Model ICO transfer risk assessment (TRA) tool The UK regulator’s guidance and template for the transfer risk assessment that must accompany a restricted transfer on an appropriate safeguard: a three-part test of the risk to… link broken ·UK ·ICO
Model Rapportagemodel DPIA Tweede Kamer (Kamerstuk) ·in Dutch Apr 30, 2026