Trick or treat? Managing risk through DPIAs

Part of the AI Sprint: six weeks of events across Guernsey, 1 October to 12 November 2026.

What this session is

Help your organisation use Data Protection Impact Assessments (DPIAs) to embrace accountability and put trust and transparency at the heart of how you innovate. This interactive session covers what a DPIA actually is beyond a compliance exercise, when one is needed, and how the process works in practice — including a hands-on "Trick or Treat?" case study, group discussion, and the most common pitfalls organisations run into.

Who it is for
Anyone responsible for data protection, governance or risk in their organisation — no prior DPIA experience needed.

What you will leave with

• A clear understanding of when a DPIA is actually needed
• A practical grasp of the DPIA process, tested against a real scenario
• Awareness of the most common DPIA pitfalls, so you can avoid them

About the host

The Office of the Data Protection Authority (ODPA) is Guernsey's independent data protection regulator. We promote responsible use of personal data, protect individuals' rights, and support organisations to innovate with confidence. Our vision is that trust, transparency and accountability are key enablers of sustainable digital innovation and AI adoption.

About the AI Sprint

The Guernsey AI Sprint is an island-wide programme, led by the G8, bringing together businesses, organisations, and individuals to explore, learn, and act on artificial intelligence. From October 1st to November 12th, we'll run workshops, talks, hackathons, and hands-on challenges designed to move Guernsey from AI curiosity to AI confidence.

Whatever your starting point, there is something on the programme for you.

See the full programme and book other sessions: ai-sprint.gg

Questions about this event? Email info@odpa.gg