It is advisable that a “privacy-by-design” approach be adopted at the design stage of a new project or initiative that might have a significant impact on personal data privacy. By going through a privacy impact assessment, the project will be checked against the privacy principles which helps to identify privacy concerns. Mitigating action can then be planned and implemented in the early stages to address privacy issues and to minimize the risk of non- compliance.

It is important that we adopt a critical and objective approach in conducting the privacy impact assessment. Depending on the nature of the project concerned and the type of personal data involved, various offices shall be involved in providing input to the assessment.