The AI DPIA & Automated-Decision Safeguards Checklist
Checklist
A checklist for screening whether an AI system triggers a DPIA and what safeguards apply to automated decision-making under UK GDPR and the Data (Use and Access) Act 2025.
DPIA screening
- Does the system process personal or special category data at scale?
- Could the processing result in a significant effect on a person?
- Has a DPIA been completed or formally ruled unnecessary, with reasoning recorded?
Automated decision-making
- Is the decision solely automated, or is there meaningful human involvement?
- If solely automated, does it produce a legal or similarly significant effect?
- Have the DUAA safeguards for significant decisions been checked?
Safeguards for affected people
- Can the affected person get information about the decision?
- Can they request human intervention and contest the outcome?
- Is meaningful human involvement genuinely possible, not just procedurally present?
Start a conversation
Have a product or AI decision to make?
Useful first calls usually start with one unclear decision, a deadline and a team that needs a practical next move.
Tell us about it