The Spanish Data Protection Agency issued a draft Privacy Impact Assessment Guide (source document in Spanish) that sets out a framework to (i) help identify data protection risks prior to the implementation of a new product or service, (ii) prevent and minimize those risks, (iii) foster confidence among users, (iv) avoid costly redesigns and damage to the image and reputation of organizations, (v) help organizations demonstrate diligence regarding data protection, and (vi) provide guidelines on privacy issues.

The content of this article is intended to provide a general guide to the subject matter. Specialist advice should be sought about your specific circumstances.