thinQmaster Virtual testing partner Adaptive practice exams that find your weak spots and drill them. Every answer explained. From $69
Enroll

thinQmaster

Find your exam

Five questions free, before you decide.

Step 1 · choose a vendor

In one of our camps? Your practice exams come with the tuition — they are on your study page already.

Governance, Risk, Audit & Privacy · Intermediate

Privacy Impact Assessment (PIA)

Analysis of how personal information is handled to ensure compliance and identify and mitigate privacy risks.

Definition

PIAs are required for US federal agencies by Section 208 of the E-Government Act of 2002 for new or substantially changed IT systems collecting PII, and are a best practice elsewhere. A privacy threshold analysis often determines whether a full PIA is needed. The GDPR equivalent with a high-risk trigger is the DPIA.

Example

A federal agency publishes a PIA before launching an online benefits application portal.

Exam tip

Conduct a PIA early in the system development life cycle, not after deployment.

Related terms