A Privacy Impact Assessment is a method for identifying and assessing an organization's privacy risks to avoid or mitigate risk and identify solutions for managing privacy risk. While the PIA is a significant tool, it is a relatively new tool, to both public and private organizations. For this reason, a PIA can vary considerably in quality and follow-up.