Legal · DPIA
Data Protection Impact Assessment (DPIA) Summary
Conducted July 2026 by Gillian Berry (Data Controller)
Nature of Processing
Collection and processing of financial and compliance data for expense management and grant reporting.
Risk Assessment
Breach risk
Mitigated by EU-region, GDPR-compliant hosting, encryption, MFA, and audit logs.
Inaccurate data
User verification + logging.
Residual risk
Low.
Conclusion
Processing is lawful, necessary, and proportionate. Full DPIA available on request.
Contact the Data Controller for the full DPIA document: gillian@percen360.com