# O5.7 Implement privacy and data protection impact assessments prior to roll-out

{% tabs %}
{% tab title="Principles" %}
[O5 Ensure data protection during use](https://safedpi.gitbook.io/safeguards/universal-dpi-safeguards-framework/principles/operational-principles/o5-ensure-data-protection-during-use)
{% endtab %}

{% tab title="Risks" %}
[SV3 Weak institutions](https://safedpi.gitbook.io/safeguards/universal-dpi-safeguards-framework/risks/risks-to-structural-vulnerabilities), [RS1 Privacy vulnerability](https://safedpi.gitbook.io/safeguards/universal-dpi-safeguards-framework/risks/risks-to-inclusion)
{% endtab %}

{% tab title="Life Cycle Stages" %}
[L1 Conception and Scoping](https://safedpi.gitbook.io/safeguards/universal-dpi-safeguards-framework/responsible-authorities/r3-donor/l1-conception-and-scoping)
{% endtab %}
{% endtabs %}

## Practcies

* Monitor and enforce the requirement for privacy and data protection impact assessments, ensuring they are conducted thoroughly before the roll-out of DPI systems.
* Provide clear guidelines on how these assessments should be performed, ensuring consistency and adherence to best practices.
* Evaluate the results of these assessments and ensure that any identified risks are addressed in accordance with legislative standards before granting approval for the DPI roll-out.
