The AI DPIA & Automated-Decision Safeguards Checklist

Checklist

A checklist for screening whether an AI system triggers a DPIA and what safeguards apply to automated decision-making under UK GDPR and the Data (Use and Access) Act 2025.

01

DPIA screening

  • Does the system process personal or special category data at scale?
  • Could the processing result in a significant effect on a person?
  • Has a DPIA been completed or formally ruled unnecessary, with reasoning recorded?
02

Automated decision-making

  • Is the decision solely automated, or is there meaningful human involvement?
  • If solely automated, does it produce a legal or similarly significant effect?
  • Have the DUAA safeguards for significant decisions been checked?
03

Safeguards for affected people

  • Can the affected person get information about the decision?
  • Can they request human intervention and contest the outcome?
  • Is meaningful human involvement genuinely possible, not just procedurally present?

Start a conversation

Have a product or AI decision to make?

Useful first calls usually start with one unclear decision, a deadline and a team that needs a practical next move.

Tell us about it