Risk assessment is fundamental to GDPR compliance. You must evaluate risks to individuals before processing their data.
Data Protection Impact Assessments (DPIAs)
A DPIA is required when processing is likely to result in high risk to individuals, such as:
- Large-scale processing of special category data
- Systematic monitoring of public areas
- Automated decision-making with significant effects
- New technologies with unknown privacy implications