Preparing for a Data Protection Impact Assessment
A short playbook for clinics that need to complete a DPIA before signing.
IT / SecurityAdminClinic owner· 10 min · Updated 29 Apr 2026
Summary
Most EU clinics complete a DPIA before adopting any clinical AI product. This guide walks through the sections most relevant to Faurenis and links to the source documents.
Checklist
- Download the Faurenis DPA template from the Trust Centre.
- Pull the current sub-processor list.
- Confirm your residency choice.
- Document your retention period and deletion workflow.
- Identify your DPO contact.
- Submit the DPIA to your DPO or the supervisory authority as required.
The DPIA sections
Lawful basis, data minimisation, sub-processors, transfers, retention, residency, and rights of the data subject. Each section has a corresponding artefact in the Trust Centre.
Common gaps
Practices most often miss the residency-vs-sub-processor distinction and the retention-vs-deletion workflow. Both are documented in dedicated explainers.