Privacy impact assessments (PIAs) are a core function of any privacy office. They facilitate privacy by design, allow for proactive management of risk and fulfill obligations from a vast number of privacy laws around the world. As legal requirements change and new uses of data require new perspectives, the PIA will need to be honed. In this guest article, Privacy Ref senior consultant Benjamin Siegel discusses setting up the initial PIA for success and offers advice on how to add new legal requirements into the process without overcomplicating the assessments. See “Effective Use of Privacy Impact Assessments” (May 4, 2022).