The Spanish DPA publishes a list of processing operations for which a DPIA is mandatory
After having received the favorable opinion of the European Data Protection Board, the Spanish Data Protection Agency (“AEPD”) released last […]
DPIA
Belgian DPA Publishes Updated List of Processing Activities Requiring DPIA
The Belgian Data Protection Authority recently published (in French and in Dutch) the updated list of the types of processing activities which require […]
ICO updates data protection impact assessment guide
The revised guidance, published by the Information Commissioner’s Office (ICO), contains changes in response to recommendations issued by an EU-wide […]
CNIL Publishes DPIA Guidelines and List of Processing Operations Subject To DPIA
On November 6, 2018, the French Data Protection Authority (the “CNIL”) published its own guidelines on data protection impact assessments […]
What’s subject to a DPIA under the GDPR?
Under the European Data Protection Regulation, data protection impact assessments are required when data processing is “likely to result in […]
EDPB: ICO too strict on data protection impact assessments
The opinion, issued by the European Data Protection Board (EDPB), differs from guidance the UK’s Information Commissioner’s Office (ICO) has […]
Do I need a Data Protection Impact Assessment to avoid GDPR fines?
Essentially, Data Protection Impact Assessment (DPIA) is a tool that is proposed under the General Data Protection Regulation (GDPR) for […]
How to approach DPIAs under the GDPR
The guiding principles of the General Data Protection Regulation stimulate organizations to address the issue of compliance with an approach […]
How to approach DPIAs under the GDPR
A DPIA consists of a procedure aimed at describing the treatment, assessing its necessity and proportionality, and facilitating the management […]
CNIL updates its PIA tool
French data protection authority CNIl has updated its PIA software to make the privacy impact assessment more practical and to […]
Assess data protection impact before conducting internal investigations
Businesses that plan to carry out internal investigations into the conduct of their employees or agents are likely to need […]
Belgian Privacy Commission Issues Recommendation on Data Protection Impact Assessment
The Belgian Privacy Commission (recently released a Recommendation (in French and Dutch) on Data Protection Impact Assessment (“DPIA”) and the […]