## 3 Results
### Components of the New DPIA--FRIA Framework
#### 3.1.2 The FPIA Part of the Framework
Consider security measures separately for both input and output data. **(P/D)**, \(\rightarrow\)_DPIA: Q20-Q30, Q32-Q42, Q44-Q46, Q67, or Q68, or Q69, depending on the answer._* 29. Is access to the system data supervised? **(P/D)**, \(\rightarrow\)_DPIA: Q67 or Q68 or Q69 depending on the answer._
* 30. Does the system adhere to applicable regulations regarding data archiving? **(P/D)**, \(\rightarrow\)_DPIA: Q45, Q67 or Q68 or Q69 depending on the answer._
* 31. Have proper controls been established to regulate access for authorized users or groups within the system? Will a procedure be implemented to authorize, monitor, and withdraw access privileges? **(P/D)**, \(\rightarrow\)_DPIA: Q43, Q67 or Q68 or Q69 depending on the answer._
* 32. Is a logging system in place to track data access and usage, ensuring threat detection, prevention, and investigation within the organization? **(P/D)**, \(\rightarrow\)_DPIA: Q44, Q67, or Q68, or Q69, depending on the answer._
* 33. Have adequate safeguards been implemented to protect the identity of system data, such as through anonymization or pseudonymization of personal information? **(P/D)**, \(\rightarrow\)_DPIA: Q41, Q67, or Q68, or Q69, depending on the answer._
* 34. Will the Automated Decision System rely on personal data for its input? **(D)**, \(\rightarrow\)_DPIA: Q4, Q67 or Q68 or Q69 depending on the answer._
* 35. Have you confirmed that personal data are used solely for purposes directly linked to the delivery of the program or service? **(D)**, \(\rightarrow\)_DPIA: Q9, Q47, Q67, or Q68, or Q69, depending on the answer._
* 36. Does the decision-making process utilize individuals' personal data in a way that directly impacts them? **(D)**, \(\rightarrow\)_DPIA: Q47, Q67 or Q68, or Q69, depending on the answer._
* 37. Have you ensured that the system's use of personal data aligns with: (a) the existing Personal Information Banks (PIBs) and Privacy Impact Assessments (PIAs) for your programs, or (b) any planned or implemented updates to PIBs or PIAs that reflect new uses and processing methods? **(P/D)**, \(\rightarrow\)_DPIA: Q67 or Q68, or Q69, depending on the answer._
* About The System
* 38. Does the system support image and object recognition? **(P)**
* 39. Does the system support text and speech analysis? **(P)**
* 40. Does the system support risk assessment? **(P)**
* 41. Does the system support content generation? **(P)**
* 42. Does the system support process optimization and workflow automation? **(P)**
* 43. Do you plan a system fully or partially automated? Please explain how the system contributes to the decision-making process. **(D)**
* 44. Will the system be responsible for making decisions or evaluations that require subjective judgment or discretion? **(D)**, \(\rightarrow\)_DPIA: Q67 or Q68, or Q69, depending on the answer._
* 45. Can you explain the standards used to assess citizens' data and the procedures implemented to process it? **(D)**
* 46. Can you outline the system's output and any essential details required to understand it in relation to the administrative decision-making process? **(D)**
* 47. Will the system carry out an evaluation or task that would typically require human involvement? **(D)**  
Figure 9: System specifications. * 48. Is the system utilized by a department other than the one responsible for its development? **(P/D)**, \(\rightarrow\)_DPIA: Q67 or Q68 or Q69, depending on the answer._
* 49. If your system processes or generates personal information, will you perform or have you already performed a Privacy Impact Assessment, or revised a previous one? **(P/D)**, \(\rightarrow\)_DPIA: Q67 or Q68 or Q69, depending on the answer._
* 50. Will you integrate security and privacy considerations into the design and development of your systems from the initial project phase? **(P/D)**, \(\rightarrow\)_DPIA: Q67 or Q68 or Q69, depending on the answer._
* 51. Will the information be used within a standalone system with no connections to the Internet, intranet, or any other external systems?