The new guidance enables the Impact Assessment on Human Rights and Algorithms (IAMA) and the Data Protection Impact Assessment (DPIA) to be applied in a more streamlined manner. When completed simultaneously or sequentially, this approach helps avoid duplication of effort. The updated guidance aligns with the recently revised IAMA.
The IAMA and DPIA are instruments with the same objective: to map out the potential impact of a planned processing activity on data subjects. However, they differ in scope. A DPIA specifically addresses the processing of personal data, while the IAMA focuses on the impact of algorithms on human rights.
Working more efficiently with the guidance
The guidance begins with the general framework for both instruments. It then links the questions in the DPIA Model for Central Government to the overlapping questions in the IAMA. It explains how to carry out the DPIA model alongside the IAMA, and how to complete the IAMA efficiently if the DPIA Model for Central Government has already been carried out. The guidance is available on the website of the Centre for Information Security and Privacy Protection (CIP) (in Dutch).
More information
The updated guidance was published by the privacy team of CIO Rijk and Digitalisation Policy in collaboration with the AI and Algorithmic Policy Government department of the Ministry of the Interior and Kingdom Relations (BZK). For questions about the guidance, contact privacy-ciorijk@minbzk.nl.
