The DSCI Assessment Framework for Privacy (DAF P) outlines that the Privacy Third Party Assessment is conducted in two phases:

Initial Assessment -- High-level review of privacy practices and process readiness

Detailed Assessment -- In-depth evaluation of privacy implementation and evidence review

This phased approach allows assessors to identify maturity gaps early and gather comprehensive evidence in the second phase.