DPIA screening
- Art. 35 Abs. 3 DSGVO Open in the law texts
- Art. 35 Abs. 4 DSGVO Open in the law texts
- WP29 WP 248 rev. 01
Is a data protection impact assessment required? Checks the Art. 35(3) examples, the DSK must-list and the nine WP 248 criteria.
A data protection impact assessment is mandatory where processing is likely to result in a high risk to the rights and freedoms of natural persons (Art. 35(1) GDPR). This screening checks the statutory examples, the German DSK must-list and the nine criteria of the Article 29 Working Party (WP 248 rev. 01).