Data Protection Impact Assessment (DPIA) for Ankit AI Chatbot

1. Introduction

• Project Name: Ankit AI

• Data Controller: Ankitkant.com

• Assessment Date: 19th May 2024

2. Purpose and Scope

• Purpose of the Chatbot: Assist health professionals with health-related information to users.

• Scope of the Assessment: Covers data collection, processing, and storage by the chatbot.

3. Description of Processing

• Nature of the Data: User queries, health-related questions, personal details (if voluntarily provided).

• Purpose of Processing: Assist users with health-related queries.

• Data Collection Methods: User inputs through the chatbot.

• Data Storage: Stored securely with appropriate measures.

4. Consultation Process

• Stakeholders Consulted: Internal and external stakeholders, including legal and IT departments.

5. Necessity and Proportionality

• Legal Basis for Processing: User consent as per the disclaimer.

• Data Minimization: Collect only necessary data.

• Retention Period: Data retained as per GDPR guidelines.

6. Risk Assessment

• Identification of Risks: Unauthorized access, data breaches, misuse of data.

• Mitigation Measures: Encryption, access controls, regular security audits.

7. Data Subject Rights

• Access, Rectification, Erasure, Objection, Data Portability: Provided as per GDPR.

8. Accountability and Governance

• Policies and Procedures: Compliance with GDPR and the Data Protection Act 2018.

9. Review and Monitoring

• Regular Reviews: Annual reviews and updates as necessary.

• Monitoring: Ongoing monitoring of data processing activities.

10. Approval and Sign-off

• Approved By: Ankit Kant