Can councils merge DPIA and Equality Impact Assessment for AI buys?

Contrasting

The LGA guide says you may integrate DPIA with EqIA or into an Algorithmic Impact Assessment to streamline, provided every DPIA and PSED requirement is still met. Central Data and AI Ethics Framework guidance treats publishing DPIA and EIA as good practice without requiring a single merged document. Keep substance complete either way.

Warning Conflicting or tensioned advice across sources

LGA suggests integrating DPIA/EqIA/AIA; Ethics Framework frames them as separate good-practice publications.

How to navigate this: Merge only if all legal requirements remain satisfied; publishing for transparency is still good practice.

From the guidance

Primary (how) Responsibly buying AI: a guide for councils in England

To streamline the process, please consider integrating your Data Protection Impact Assessment (DPIA) with either an Equality Impact Assessment (EqIA) or into an Algorithmic Impact Assessment (AIA, see below), provided all DPIA and PSED requirements are met.

Section: What does data protection law require?

Read this in Responsibly buying AI: a guide for councils in England (opens in new tab)

Contrasting Data and AI Ethics Framework

Position: Good practice to publish completed DPIA and EIA as transparency artefacts.

It’s good practice to publish your completed DPIA to demonstrate that you’re taking the appropriate precautions to protect personal data and ensure your system is fair.

Section: Data protection-related transparency

Read this in Data and AI Ethics Framework (opens in new tab)

Related questions