EDPB: ICO too strict on data protection impact assessments
The opinion, issued by the European Data Protection Board (EDPB), differs from guidance the UK’s Information Commissioner’s Office (ICO) has […]
DPIA
Do I need a Data Protection Impact Assessment to avoid GDPR fines?
Essentially, Data Protection Impact Assessment (DPIA) is a tool that is proposed under the General Data Protection Regulation (GDPR) for […]
How to approach DPIAs under the GDPR
The guiding principles of the General Data Protection Regulation stimulate organizations to address the issue of compliance with an approach […]
How to approach DPIAs under the GDPR
A DPIA consists of a procedure aimed at describing the treatment, assessing its necessity and proportionality, and facilitating the management […]
CNIL updates its PIA tool
French data protection authority CNIl has updated its PIA software to make the privacy impact assessment more practical and to […]
Assess data protection impact before conducting internal investigations
Businesses that plan to carry out internal investigations into the conduct of their employees or agents are likely to need […]
Belgian Privacy Commission Issues Recommendation on Data Protection Impact Assessment
The Belgian Privacy Commission (recently released a Recommendation (in French and Dutch) on Data Protection Impact Assessment (“DPIA”) and the […]
UK’s DPA releases data protection self assessment tool
The ICO’s data protection self assessment toolkit helps you assess your organisation’s compliance with data protection law and helps you […]
Data Protection Impact Assessment
Article 35 of the GDPR provides for Data Protection Impact Assessments (DPIA). According to Article 35(1) a DPIA is required […]
The Polish DPA’s draft list of triggers for mandatory DPIAs
In line with the Article 35(4) of the GDPR, the Polish Data Protection Authority prepared and published a draft list […]
Businesses face three month delay to ‘high risk’ data processing
Businesses could be forced to put major new technology projects on hold for more than three months if they trigger […]
AEPD guidelines on risk assessments and data protection impact assessments
To facilitate compliance with the General Data Protection Regulation, the Spanish Data Protection Agency, or AEPD, has published data protection […]