Screening Lists

Many regulators publish a list of the kinds of processing that require a privacy impact assessment, and some a list of processing that does not. The jurisdiction packs install those lists, and an assessment's screener reads them. Screening lists is where an administrator sees what was installed and switches lists or single entries on and off. For how the screener uses a list on an assessment, see DPIA Validation.

Where to Find It

Open Settings from the app toolbar and choose Screening lists in the Assessments & controls group. The group is visible only to users who hold the relevant privacy configure permission.

What the List Shows

Each row is a list a jurisdiction pack installed:

• the authority that published it;
• the kind: Assessment required or Exempt from assessment;
• the entries;
• the instrument it comes from and the date it was adopted;
• for a list of criteria, how many are needed.

Click a row for its read-only view.

Switching Lists and Entries On and Off

Edit switches the list, or single entries, off and on. Lists are never deleted. The screener ignores a list that is switched off, and re-applying a pack keeps your choices; the row says edited here.

Default Authority for Screening Lists

Default authority for screening lists (people with Manage configuration) chooses whose lists the screener reads when the questionnaire names none. Set it when your tenant holds lists from more than one authority, for example Germany's two. With one authority it is chosen automatically.

On an assessment, the screener reads the authority the question names, otherwise the questionnaire's legal authority's list, then this default, then the only authority whose lists are installed. Whoever screens an assessment can still choose Use another authority's list for that assessment.

Lists the Packs Install

The lists come with the jurisdiction packs: the CNIL's two lists, the German federal commissioner's list and the supervisory authorities' joint list, the Netherlands, Spain's two lists, Italy, Ireland, the UK ICO, Québec's situations in which the law requires a privacy impact assessment, and the Australian indicators of a high privacy risk project. They are a starting point built from public information about the legislation, not legal advice. Your legal counsel validates and adjusts them. See Configuration Packs.

Using Lists in Your Own Screener

The screener builder in Assessment Templates offers the Screening list answer type and the Exempting role: a ticked entry of an exemption list screens the assessment out.

Related Pages

• DPIA Validation — how the screener and the lists work on an assessment.
• Assessment Templates — the screener builder and the validation settings.
• Configuration Packs — the packs that install the lists.
• Legal Authorities — the authorities the lists belong to.