DPIAs become as easy as ticking a box
Data protection impact assessments, done properly, auto-filled with most laws and retention periods and in a fraction of the time. Screen any activity in minutes, complete the DPIA it really needs by ticking boxes which auto output your DPIA. Then get your ROPA row at the same time! Built by working DPOs for companies, health and care providers, state & independent schools, and councils.
Tick a few boxes and find out in 30 seconds. Nothing you tick is sent or saved.
- Screening that tells you if a DPIA is needed, and why
- Ready-made activity templates fill in the usual answers
- Risk calculated from your answers, not guessed
- DPIA report, action plan and ROPA row from one set of answers
- Specialist add-on DPIAs open only when they apply
DPIAs take too long, so they get skipped
Blank templates, legal jargon and guesswork on risk mean DPIAs are left half-finished or never started. When something goes wrong, there is no record to show you thought about it first. DPOHub DPIA turns the law into clear questions, does the calculations for you, and only asks what each activity needs.
Three steps from activity to signed-off DPIA
Pick an activity
Start from one of our templates, such as payroll, CCTV, school admissions or council tax. Your organisation profile fills in the systems, security and policies you use everywhere.
Answer the screening
Part 1 checks the legal triggers and tells you the route: no DPIA, a Short DPIA (Schools and Councils editions) or a Full DPIA. Each question uses the data protection term, explains it in plain English and gives the law behind it.
Get your outputs
DPOHub calculates the risks, lists the actions, and produces your DPIA report, any add-on DPIAs and your ROPA row, ready for sign-off.
Features that save time, benefits you can show the regulator
| Feature | Benefit |
|---|---|
| Screening decides the route: no DPIA, a Short DPIA (Schools and Councils editions) or a Full DPIA | You only do the work the law asks for, not a full DPIA for everything |
| Ready-made activity templates fill in the usual answers | Start most of the way there instead of a blank page |
| Answer your organisation profile once; it is reused for every activity | No more typing the same systems, security and policies again and again |
| Risk calculated as likelihood × severity from your answers and safeguards | Consistent, explainable scores you can defend |
| Questions in data protection terms, explained in plain English, with the law behind them | Anyone can complete it, and your team learns as they go |
| DPIA report, action plan and a 48-column ROPA row | One set of answers, three outputs |
| Add-on DPIAs open automatically when needed, such as CCTV | Specialist risks are never missed |
| Every pre-filled answer marked "Suggested: check this"; anything unticked shown in red with NOT | A clear audit trail of what was changed |
| Runs in your browser; saves to OneDrive or SharePoint, with optional password encryption | Your data stays with you: no accounts, no cookies, no cloud |
| Picks up where you left off | Fit it around your day without losing progress |
Not sure where to start? Tick a few boxes and we will tell you which DPIA you need.
Which DPIA do I need?Built for your sector, not adapted from someone else's
Companies and SMEs
For companies and SMEs, most without a DPO on the payroll.
- 62 business activity templates
- Marketing, AI and supplier checks
- Quick mode for low-risk activities
Health and social care providers
For care homes, home care, clinics and other providers.
- Health and care DPIA built in
- Caldicott and mental capacity checks
- CCTV in care settings
State schools and trusts
For schools and academy trusts.
- 47 school activity templates
- EdTech, biometrics, SEND and medical DPIAs
- Safeguarding built in
Independent and boarding schools
For fee-paying independent schools and bursars.
- 52 bespoke independent templates
- Fee planning, boarding & alumni checks
- International admissions & vetting
Councils
For every type of UK council.
- 154 council activity templates
- Five specialist DPIAs
- ROPA import and batch assessment
Your data never leaves your organisation
DPOHub DPIA runs entirely in your web browser. Nothing you type is sent to DPOHub or anyone else. You keep your work as project files in your own OneDrive or SharePoint.
- No accounts, no cookies, no analytics
- Optional password protection with strong (AES-256) encryption
- Licensed to your organisation and hosted by you
- Works in Edge, Chrome, Firefox and Safari, on desktop, tablet and phone
Created by working data protection officers
Where a DPO would review or sign off, DPOHub DPIA says so. If you have a DPO, they will access this. If you do not, DPOHub can help: from a quick review of a tricky activity to a fractional DPO service.
Frequently asked questions
Do I need a DPIA for every activity?
No. The law asks for a DPIA when processing is likely to result in a high risk to people. DPOHub DPIA screens each activity and tells you whether you need no DPIA, a Short DPIA or a Full DPIA, and records the reasons either way.
Do I need to be a data protection expert?
No. Every question uses the correct legal term, explains it in plain English, and links to the law behind it. Where a DPO should check something, the tool tells you.
Where is my data stored?
Only on your own computer and in the project files you save, for example in OneDrive or SharePoint. Nothing is sent to DPOHub.
What do I get at the end?
An evaluation report, an action plan, any add-on reports, and a ROPA row you can download as Excel or paste into your existing register.
Does it cover Scotland, Wales and Northern Ireland?
Yes. Each edition covers the whole UK and notes where the law or the organisation responsible differs.
Which edition do I need?
Pick the one for your sector. Health and care providers use the Company edition with the Health and care DPIA built in. Not sure? Email consult@dpohub.co.uk
Is this legal advice?
No. DPOHub DPIA gives guidance. Every organisation and every situation can be different, so check the answers and results, and ask your DPO or DPOHub.
Make your next DPIA the easiest one yet
Use our interactive checker to find out how DPOHub DPIA works for your organisation.
Advice only. DPOHub DPIA and its results are guidance, not legal advice. Every organisation and every situation can be different, so check the answers and results before you rely on them, and ask your DPO. If you have a DPO, they will access this. If you do not, DPOHub can help: contact consult@dpohub.co.uk