Step 5: Identify and assess risks
-
Due to the Data (Use and Access) Act coming into law on 19 June 2025, this guidance is under review and may be subject to change. The Plans for new and updated guidance page will tell you about which guidance will be updated and when this will happen.
Guidance: You must consider the potential impact on children and any harm or damage your data processing may cause – whether physical, emotional, developmental or material.
When completing this section, if may be helpful for you to refer to Standard 5 of the code – Detrimental use of data and the Children’s code harms framework.
Describe source of risk and nature of potential impact on individuals. Include as a minimum an assessment of particular risks to children as listed in the DPIA standard in the Children’s Code. You may need to consider separately for different age groups. |
Likelihood of harm Remote, possible or probable |
Severity of harm Minimal, significant or severe |
Overall risk Low, medium or high |
---|---|---|---|
|
possible | significant | medium |
|
possible | significant | medium |
|
possible | significant | medium |
|
possible | significant | medium |
|
remote | minimal | low |
|
possible | significant | medium |