privacy risk assessment - short form — confidential - International ...

Potential Privacy Loss Description (Mandatory):
What are the possible consequences of a privacy breach: describe financial, reputational or other impacts.
Management Action(s) (Completed/Proposed):
Are the risks described in this assessment acceptable to the business If not, what actions will be undertaken to reduce risks to an acceptable level
PRIVACY RISK EXPOSURE SCORE (High, Medium or Low) (Optional)
PROBABILITY: Probability of negative outcome
LOSS: Degree or severity of harm if negative outcome occurs
Status:
PRIVACY RISK TRACKING – ACCOUNTABILITY (please sign or indicate approval) - MANDATORY
Project Sponsor/Business Owner:
Date:
Cost Centre:
Line of Business/Department:
Project Manager:
Privacy Risk Assessment reviewed
by:
Follow-up Actions:
Date:
Date:
Date:
Escalation (if required):
Exception request required
Page 4 of 8