A Practice Note describing the privacy impact assessment (PIA) process (also known as a data protection impact assessment (DPIA) or data protection assessment), including how, when, and why to conduct a PIA. This Note explains why conducting PIAs is an important tool for implementing privacy by design programs and how PIAs can help organizations mitigate privacy risks.