Using this DPIA support information

This information is designed to help organisations complete a Data Protection Impact Assessment (DPIA) when considering or using Wyser ASSIST.

It provides factual information about how ASSIST works and answers common questions that may arise when assessing the service as part of your DPIA. You can use the information as a starting point when completing the sections of your own DPIA that relate to ASSIST.

Your organisation remains responsible for completing its own DPIA and making decisions about how ASSIST is used. This includes decisions about lawful basis, Article 9 and Article 10 conditions, necessity and proportionality, consultation, retention and how the service is configured.

The information provided does not replace your organisation's legal advice, DPO assessment or other internal data protection processes.

Your DPIA should reflect your organisation's specific use of ASSIST, including the integrations, data flows and purposes involved. You should also check the current Wyser Data Processing Agreement and subprocessor list when completing or reviewing your DPIA.

For further guidance, see the DPIA Support resources in this section, including a worked example showing how information about ASSIST can be incorporated into the ICO's seven-step DPIA structure.