Impact and risks assessments are at the core of multiple digital regulations: General Data Protection Regulation (GDPR), AI Act (AIA), Digital Services Act (DSA)… But what can be learned from these experiences? This workshop seeks to enhance the DSA’s risk assessment framework for very large online services. Indeed, early reports lack depth and transparency, often prioritizing formality over substance. Meanwhile, the Privacy Impact Assessments (PIA), with their emphasis on proactive risk identification, stakeholder engagement, and accountability, appear to be an interesting model to learn from. The workshop will convene different stakeholders to: - Analyze the GDPR’s PIA methodologies (stakeholder consultations, risk documentation, iterative assessments); - Compare the DSA and GDPR approaches; - Identify best practices from PIAs to improve the DSA’s rigor, transparency, and accountability. Through collaborative brainstorming and group work, participants will develop and present key recommendations outlining actionable steps for regulators, platforms, and practitioners.