Data protection impact assessment
- Art. 35 DSGVO Open in the law texts
- Art. 36 DSGVO Open in the law texts
Full DPIA under Art. 35(7): description, necessity, five risk sources before and after measures in a risk matrix, DPO advice, sign-off or prior consultation under Art. 36 with the deadline for the opinion. Print version as report.
One DPIA per processing operation likely to result in a high risk: description, necessity, risks before and after measures, decision and, where needed, consultation of the authority. The rating follows the DSK risk matrix; the print version serves as the report.