DPIA Draft

Article 35 GDPR Data Protection Impact Assessment. Full memo covering necessity, proportionality, risk register, and safeguards. Required before deploying high-risk processing.

1. Nothing is charged now. The firm reviews your request.
2. Before it can act, it checks for conflicts of interest and verifies who it is working with. You may be asked for documents in your client portal.
3. Once the checks are complete, you receive the terms of engagement, which confirm the fee for your matter, and the invoice, paid by bank transfer.
4. If the firm cannot act for you, it tells you, and you have paid nothing.