CNIL Publishes DPIA Guidelines and List of Processing Operations Subject To DPIA
On November 6, 2018, the French Data Protection Authority (the “CNIL”) published its own guidelines on data protection impact assessments […]
DPIA
What’s subject to a DPIA under the GDPR?
Under the European Data Protection Regulation, data protection impact assessments are required when data processing is “likely to result in […]
EDPB: ICO too strict on data protection impact assessments
The opinion, issued by the European Data Protection Board (EDPB), differs from guidance the UK’s Information Commissioner’s Office (ICO) has […]
Do I need a Data Protection Impact Assessment to avoid GDPR fines?
Essentially, Data Protection Impact Assessment (DPIA) is a tool that is proposed under the General Data Protection Regulation (GDPR) for […]
How to approach DPIAs under the GDPR
The guiding principles of the General Data Protection Regulation stimulate organizations to address the issue of compliance with an approach […]
How to approach DPIAs under the GDPR
A DPIA consists of a procedure aimed at describing the treatment, assessing its necessity and proportionality, and facilitating the management […]
CNIL updates its PIA tool
French data protection authority CNIl has updated its PIA software to make the privacy impact assessment more practical and to […]
Assess data protection impact before conducting internal investigations
Businesses that plan to carry out internal investigations into the conduct of their employees or agents are likely to need […]
Belgian Privacy Commission Issues Recommendation on Data Protection Impact Assessment
The Belgian Privacy Commission (recently released a Recommendation (in French and Dutch) on Data Protection Impact Assessment (“DPIA”) and the […]
UK’s DPA releases data protection self assessment tool
The ICO’s data protection self assessment toolkit helps you assess your organisation’s compliance with data protection law and helps you […]
Data Protection Impact Assessment
Article 35 of the GDPR provides for Data Protection Impact Assessments (DPIA). According to Article 35(1) a DPIA is required […]
The Polish DPA’s draft list of triggers for mandatory DPIAs
In line with the Article 35(4) of the GDPR, the Polish Data Protection Authority prepared and published a draft list […]