List of Types of Data Processing Operations which require a Data Protection Impact Assessment

The list is intended to encompass both national and cross-border data processing and reflects feedback received during public consultation. The list has also been approved by the European Data Protection Board (EDPB) where it includes processing operations relating to the provision of goods and services to individuals or the monitoring of their behaviour in several Member States or which may substantially affect the free movement of data within EU.