A Bastion Privacy Impact Assessment is a process that assesses an initiative against the 13 Information Privacy Principles of the Privacy Act (2020) throughout all stages of the information life cycle. The PIA identifies privacy risks and provides practical advice on how to prevent harm occurring, while offering a competitive advantage by highlighting opportunities to do privacy well.

An AI PIA is a specialist Privacy Impact Assessment offered by Bastion, assessing Privacy Act compliance with a particular focus on the ethical and technological implications of AI use. The result is a comprehensive risk assessment, informed by the latest research and thought, that identifies risks and provides guidance on how AI can be leveraged in a privacy-protective manner.

We will start by ensuring that your business context and initiative are fully understood, typically by conducting workshops and reviewing any relevant documentation. Bastion will then perform an expert analysis across that information, providing you with a document that gives actionable insights on protecting your customers’ data.

Ideally as early in the development of your initiative as possible. This allows for a Privacy by Design approach to be used, identifying privacy risks and the controls against them that prevent them from becoming reality early in the piece. Do not worry if you’re further down the track though – a PIA can be completed at any point, even retroactively.

A PIA completed by Bastion will consist of a report that thoroughly analyses how your initiative performs against data protection law and latest privacy thought. The PIA will guide the reader through a thorough analysis of your initiative’s risks and the recommendations we make to manage them.

Yes. Our team of experts are active within the international privacy community and have experience working with international legislation such as General Data Protection Regulations, the Australian Privacy Act, and the California Online Privacy Protection Act.