Create a Data Protection Impact Assessment for GDPR
To comply with the GDPR, many organizations will have to conduct a Data Protection Impact Assessment. A Data Protection Impact Assessment is complicated, and it requires planning and investigation. Consult your Data Protection Officer, if you have one.
You have to know how your organization processes data before you know whether you need to run a Data Protection Impact Assessment (DPIA).
According to the GDPR, the supervisory authority will make a list of the kind of processing operations which are subject to the requirement for a data protection impact assessment publicly available.
Source: Create a Data Protection Impact Assessment for GDPR – DZone Security