Data protection impact assessment

Where processing is likely to result in high risk to individuals, the controller must assess necessity, proportionality, risks, and risk mitigation before processing.

Article

Art. 35

Chapter

Chapter IV — Controller and processor