Skip to main content

O365 migration DPIA templates

These data protection impact assessment (DPIA) templates are for project leads and IG professionals in health and care organisations who are involved in managing and supporting Microsoft Office 365 (O365) data transfers.

Page contents

O365 migration

An O365 migration is the process of moving data held within O365 services such as Outlook, Teams, SharePoint and OneDrive from one location, storage system or tenant to another.

An O365 migration may become necessary when a health and care organisation:

  • upgrades to new systems and platforms
  • switches cloud providers
  • merges with another organisation

Template DPIAs

NHS England has produced two templates which can be adapted locally to support good information governance for O365 migration projects.

The first template supports data processing during the O365 migration.

The second template supports data processing after the O365 migration has completed when the data is being stored in the new location.

Last edited: 7 May 2026 12:46 pm