Creating an assessment (PIA/AIA/Security) — choosing a type and template, naming, picking a subject, and the preliminary screener
Last updated: July 12, 2026 by Steve
Creating Assessments
New Privacy Impact Assessments (PIAs), Algorithmic Impact Assessments (AIAs), and Security assessments are started from the create dialog on the Assessments dashboard toolbar. It is used by privacy analysts, security assessors, and coordinators who hold the create assessment permission.
Key Terms
| Term | What it means |
|---|---|
| Assessment type | PIA, AIA, Security (SEC), or a custom type. Drives which templates are offered and whether scoring/tiering and the harm-to-individuals lens apply. |
| Template | The questionnaire (sections and typed questions) the assessment runs on. Carries the governing legal authority and, optionally, a preliminary screener. |
| Privacy subject | The durable thing being assessed — a Program, System, Initiative, Data-sharing arrangement, Process change, or Technology adoption. Reused across assessments and incidents. |
Creating an Assessment
- Pick the assessment type. The type drives which templates are offered and whether scoring applies — a note appears for scored types.
- Pick a template. The list is filtered to the chosen type; exact-type templates sort first, generic ones follow. The template's governing legal authority shows read-only beneath it.
- Enter the assessment name (required).
- Choose the subject. Start typing in the subject box — matching existing subjects appear. Pick one, or type a new name to inline-create a subject on save.
- (Optional) If you hold the customize permission, tick customize the questionnaire to clone the template just for this assessment right after it is created.
- Click Create — or, if the template defines a preliminary screener (threshold analysis), click Continue to screener.
(screenshot placeholder — capture: the create-assessment dialog with type, template, governing legal authority, name, and subject fields filled in)
Closing the dialog with unsaved entries prompts before discarding.
The Preliminary Screener
When the template defines a screener, a second step asks the threshold questions — Yes/No or choice, each with optional guidance. Every question must be answered.
Based on the answers, the system decides the determination:
- Screened out — a lightweight compliance record is created with no sections.
- Otherwise, the full section set is instantiated.
(screenshot placeholder — capture: the screener step with threshold Yes/No questions and their guidance text)
Re-assessing a Subject
When you launch a new assessment from a subject via Re-assess, the subject is pre-filled and locked. Re-assess also skips the screener, because the subject was already determined to need an assessment. Re-assess is how a frozen (In Effect or Closed) assessment moves forward — see Assessment Details.
Next Steps
- Work the new assessment in the detail panel — see Assessment Details
- Manage the subject you assessed in the Privacy Subjects directory