A formal documented assessment which allows decision-makers to identify, manage and mitigate any data protection risks associated with a project.