AppSheets - is a DPIA required?

[timbo343]

We are been asked to open up appsheets.com so a savvy staff member can build something to show a proof of concept.

 

I guess that appsheets is independant to Google Workspace so if data is stored in AppSheets then i'm presuming a DPIA is required?

[TechMonkey]

If they are creating generic wireframes or proof of concepts, then not needed.  If they are populating data from your organisation that is classified as personal then definitely. If there is any doubt I would go with yes to cover the org.

[psydii]

It’s always a good idea to know what tools are being used, and always good to be able to show to the auditors you checked.

We start the DPIA process for any new service, and if it only requires users and linking to our authentication system, we glance over their privacy notice and contracts, close the file and wave it on through. If it handles/might handle personal data or does something unusual we instead proceed to a full in depth dpia, which can take a while.

 

 

Starting the DPIA process takes an hour or two depending on how close it gets to needing the full treatment. We try to start them the same day we get the request so people don’t come to resent the proper (and necessary) business-admin-processes. I.e if a DPIa isn’t really needed, we have a record of that, and the sponsor gets the go ahead same day. Everybody wins.