CORAA

Privacy Impact Assessment (DPIA) Template (Word)

Describe the processing, test notice and basis, score risks to individuals, and record a go or no-go decision.

Free · CORAA original — SA-aligned
Updated 17 Oct 2026
Before
Launching or changing
Covers
Data · basis · risk
Ends with
Decision
Format
Editable Word
Share this template
Your firm — letterhead
Appears at the top of the document as the audit firm letterhead.
Used as the letterhead block.
Engagement details
The client and period this document is for.
What’s inside

An excerpt from the template.

Privacy Impact Assessment (DPIA) — ___

Period / scope: ___ | Prepared by: ___ | Reviewed by: ___ | Date: ___

Use before launching or changing a process, system or product that handles personal data. This form helps you describe the processing, judge the risk to individuals and decide on controls. Check the current DPDP Act and Rules for what applies to your organisation; this form is a working aid, not legal advice.

1. The processing

↑ Excerpt only — the full template is what you download as Word
About this template

What you’re downloading, and when to use it.

This template follows the format published by the Institute of Chartered Accountants of India (ICAI) in the AASB Audit Working Paper Templates (June 2023), the authoritative reference for Indian statutory-audit documentation. Fill in your firm’s letterhead and the engagement details on the form above, click Download Word file, and you’ll get a fully formatted .docx ready to use.

Everything is generated in your browser and on a stateless API endpoint — no account, nothing stored on our servers. We’ll ask for a work email once before your first download so we can send you the file and the occasional relevant update; after that, downloads on this device are instant. Edit freely in Word, Google Docs or Pages before sending to your client.

Common questions

FAQs.

Is a DPIA mandatory in India?
Check the current DPDP Act and Rules for your organisation. A DPIA is also good practice before any change that handles personal data in a new way.
Related templates

You might also need.

Data Privacy (DPDP Act 2023) Compliance Audit Checklist
Free DPDP Act 2023 compliance audit checklist. Tests consent management, data fiduciary obligations, breach no
Vendor Management Internal Audit Checklist
Free vendor management internal audit checklist. Tests vendor onboarding KYC, master data controls, price appr
Risk Register Template
Generate a risk register template with likelihood and impact scoring, inherent and residual risk, controls, ow