Data Protection Impact Assessments (DPIAs)

A Data Protection Impact Assessment (DPIA) is a process designed to assess the personal data risks of a project. The completion of a DPIA is an essential part of our accountability obligations under the UK GDPR. Our DPIAs consider compliance risks as well as privacy risks to the rights and freedoms of individuals. Further DPIA guidance is available from the Information Commissioner’s Office (ICO).

The DPIAs undertaken and approved by the council since 25 May 2018 are:

  • Scan Invoices into Agresso
  • Corporate Print Review
  • Tusker
  • Universal Credit Digital Support
  • DWP Requirement For Staff Checks
  • Virtual Permit Management System
  • Huume
  • Destin Solutions
  • Digital Planning Notifications
  • Upgrade of Capita Payment Management System
  • ReferKent
  • Data Sharing with One Maidstone
  • Community Larder Membership
  • CSDS National Obesity Audit
  • Office for National Statistics Web-Scraping Policy
  • Golding Homes Housing Register
  • Land Charges Register Transfer
  • Citizen’s Advice Bureau Maidstone
  • Public Planning Enforcement Register
  • Encompass
  • Greater South East Net Zero Hub Grant Funding

Request a copy

To request copies of our completed DPIAs, you can email us at You can also write to us:

Data Protection Officer
Information Governance
Maidstone Borough Council
Maidstone House
King Street
ME15 6JQ