A systematic process to evaluate the potential effects that a project, initiative or system might have on privacy and to determine the appropriate management of privacy risks.