Skip to content
papii

Document template · eu.gdpr.dpia

Data Protection Impact Assessment

  • Render-verified
  • Legal-sensitive
  • Version 1.0.0

DPIA for high-risk processing. Mandatory under Art. 35 when processing is likely to result in a high risk to the rights and freedoms of natural persons. Output is consulted before processing starts; may be a prerequisite for Art. 36 prior consultation with the supervisory authority.

JSON Schema

Fields in this template

Data sent to the API is validated against the template’s JSON Schema before anything is rendered. This template defines 46 fields:

Field Required Type Description
reference Optional string
assessment_date Optional date
version Optional string
project Required object
project.name Required string
project.owner Optional string
project.summary Optional string
controller Required object
controller.name Required string
controller.contact_email Required string
controller.dpo_name Optional string
controller.dpo_email Optional string
processing_description Required object
processing_description.nature Required string
processing_description.scope Required string
processing_description.context Required string
processing_description.purposes Required array of string
processing_description.data_flows Optional string
high_risk_triggers Optional array of string WP29/EDPB criteria making the processing high-risk (any two+ usually triggers DPIA).
necessity Required object
necessity.lawful_basis Required string
necessity.proportionality Required string
necessity.data_minimisation Optional string
necessity.retention Optional string
consultations Optional array of object
consultations[].party Required string
consultations[].date Optional date
consultations[].outcome Required string
risks Required array of object
risks[].id Required string

+16 more fields — the full JSON Schema is available in the dashboard and via the API.

POST /render

Generate it

One POST /render call: send your JSON, get the finished PDF back. Or skip the JSON entirely and describe the document in plain language on chut.app.

curl 
curl -X POST https://api.papii.eu/render \
  -H "X-API-Key: YOUR_API_KEY" \
  -H "Content-Type: application/json" \
  -d '{
    "template": "eu.gdpr.dpia",
    "data": { ... },
    "options": {"language": "en"}
  }' -o dpia.pdf
Generate with AI on chut.app Try in the dashboard

Frequently asked questions

What is “Data Protection Impact Assessment”?

DPIA for high-risk processing. Mandatory under Art. 35 when processing is likely to result in a high risk to the rights and freedoms of natural persons. Output is consulted before processing starts; may be a prerequisite for Art. 36 prior consultation with the supervisory authority. On papii this document is available as template eu.gdpr.dpia: a JSON Schema plus a deterministic PDF renderer, so the same data always produces the same document.

Can I generate a Data Protection Impact Assessment with AI?

Yes. chut.app — the AI back office papii powers — fills this template from a plain-language description: you describe the document in one sentence, the AI structures the data, papii validates it against the schema and renders the PDF. Developers can also call the papii API directly with structured JSON.

Is the Data Protection Impact Assessment template legally compliant?

This template is render-verified: its schema, sample data and PDF output are automatically tested on every release. It is published with status “ready”, meaning it has not yet been through papii’s final legal review. Where it references specific legislation, that is stated in the template description — always have a professional check documents with legal effect before relying on them.