---
title: "Data protection impact assessment for AI | Digital Cuisine"
description: "We support data protection impact assessments for AI and Microsoft 365 Copilot, together with data protection, legal, IT and the affected business departments."
url: "https://cuisine.digital/en/services/data-protection-impact-assessment"
lang: en
generated: cuisines-markdown-v1
---

AI consulting for businesses

# Assess data processing transparently.

We support data protection impact assessments for AI and Microsoft 365 Copilot, together with data protection, legal, IT and the affected business departments.

[Request an initial AI conversation](https://cuisine.digital/en/contact?thema=Datenschutz-Folgenabsch%C3%A4tzung)[View our work](https://cuisine.digital/en/references.md)

![Linde](https://cuisine.digital/images/projects/linde-global-website-relaunch/logo.webp)

## Copilot governance & platform architecture

Copilot governance for Linde: platform architecture, approval processes and a dashboard for agent inventory, usage and lifecycle.

View project 

[View project](https://cuisine.digital/en/linde-copilot-governance.md)

International data provider

## Copilot agent as a product in the Microsoft Store

Copilot agent in the Microsoft Copilot Store: Graph Search Connectors, Python data preparation, custom SharePoint search.

View project 

[View project](https://cuisine.digital/en/copilot-store-agent.md)

Financial services provider

## Data protection for Copilot use

DPIA for Microsoft 365 Copilot at a financial services provider: data flow analysis, risk assessment, measures and decision documents.

View project

## From initial screening to an action plan

First, we assess whether a data protection impact assessment is required for the project. We then examine the actual processing activities and their risks for the people affected.

The assessment combines data flows, technical functions and organisational measures. It supports a documented decision by the responsible bodies.

## What you receive

**Threshold and data flow analysis** Recording the processing purpose, data types, parties involved and transfers.

**Risk assessment** Assessing the likelihood and severity of possible impacts.

**Measures and documentation** Documenting technical and organisational measures and remaining risks in a traceable way.

## Frequently asked questions

### Does every AI system require a DPIA?

No. Whether one is required is assessed based on the specific processing and the statutory criteria.

### Who remains responsible?

The data controller makes the decision. We provide support through technical and specialist analysis and documentation.

The next step

## Does your AI project need a DPIA?

Tell us about your idea or challenge. Together we work out what makes sense and how we can support you.

[Book a call (30 min)](https://outlook.office.com/book/AIcuisine@cuisine.digital/)

---

[Original page](https://cuisine.digital/en/services/data-protection-impact-assessment) · [Contact and project enquiry](https://cuisine.digital/en/contact)