Reply to post:

Data Protection Impact Assessment? It's a pretty safe bet that anything ending "... Impact Assessment" is a pointless piece of make-work for consultants, and not terribly bright consultants at that.