Data Protection Impact Assessment - Lists of processing activities
Each data protection authority issues a list of the kind of processing operations which are subject to the requirement for a data protection impact assessment (DPIA), following an EDPB opinion (Art. 35(4) GDPR).
Data protection authority may also establish a list of the kind of processing operations for which no DPIA is required (Art. 35(5) GDPR).
This register provides an overview of these lists adopted by data protection authorities.