A Privacy Impact Assessment (PIA) is an instrument for assessing the potential impacts on privacy of a process, information system, programme, software module, device or other initiative which processes Personally Identifiable Information (PII) and, in consultation with stakeholders for taking actions as necessary in order to treat privacy risk (ISO/IEC 29134).