Fictional AcmeHR SaaS sample
DPIA draft
A realistic product artifact preview using fictional AcmeHR SaaS data. It shows how confidence, evidence, missing proof, owner approval, and review status travel with generated content.
Privacy review draft
DPIA draft: CV Summarization using OpenAI
Processing purpose
Summarize candidate CVs for recruiter review and reduce manual reading time.
Data categories
Employment history, education, skills, contact details, and free-text CV content.
Risks
Inaccurate summaries, special-category inference, cross-border transfer uncertainty, and overreliance by recruiters.
Mitigations
Human review, prompt logging policy, vendor DPA, and candidate-facing transparency language.
Open questions
Vendor DPA and prompt logging policy need approval before external sharing.
Medium confidence
3 missing proof items
- Owner
- Head of Product
- Last reviewed
- 10 May 2026
- Next review
- 25 Jun 2026
- Approved by
- Pending legal review