Opening the book…
Articles 35 and 36 cover Data Protection Impact Assessments for new technology, to include discussion of necessity and proportionality, risk assessment, and risk mitigation. Where a controller assesses high risk, the controller shall consult the supervisory [data protection] authority.
Data Protection Impact Assessments are among the compliance documentation mandated and specified by the GDPR.
3.2.22: Articles 35-36 Data Protection Impact Assessments is shared under a CC BY 4.0 license and was authored, remixed, and/or curated by LibreTexts.
The book could not be loaded just now.