The Personal Data Protection Impact Report (RIPD) is provided for in article. 5, XVII, of the General Personal Data Protection Law (LGPD).

In practice, this is the documentation in which the controller describes the processes for personal data processing that may generate risks to civil liberties and fundamental rights, as well as measures, safeguards and risk mitigation mechanisms.

By conducting a RIPD, the controller will be more confident as to the compliance with the different foundations of the Law concerning privacy; informative self determination; freedom of expression, information, communication and opinion; the inviolability of intimacy, honor and image; consumer protection; and human rights, the free development of personality, dignity and the exercise of citizenship by individuals.