The Spanish data protection authority – AEPD – has published a Model Data Protection Impact Assessment ‘DPIA) Report for the Private Sector. it includes the factors that must be taken into account by the private sector in order to perform a DPIA, including the description of the data processing activity, its purpose and legal basis, as well as risk mitigating measures.
Ryanair Faces Investigation Over Facial Recognition and GDPR Compliance
Ireland's DPC investigates Ryanair's facial recognition use for third-party bookings amid customer complaints about privacy law compliance.