How small companies conduct a Privacy Impact Assessment (PIA)?

What impact does a PIA have on a company’s operations from the employees’ perspective?

What are the drawbacks of not conducting a PIA for companies?