Privacy Impact Assessments: International Study of Their Application and Effects

This report is the product of an international study into the use, practice and utility of Privacy Impact Assessments (PIA) in order to identify lessons that could be applied in the United Kingdom. The study was conducted for the Office of the Information Commissioner of the United Kingdom. Reviews of legislation, policy and PIA tools were conducted for the United States of America, New Zealand, Hong Kong, Australia and Canada (including states and pertinent provinces). In these jurisdictions, primary research was also undertaken through interviews with individuals in data protection and privacy oversight bodies, in central government agencies as well as with those who had conducted or were responsible for the conduct of PIAs. Less comprehensive research was also undertaken with regard to the jurisdictions of the European Union.