Basic information about the regulation

Name of regulation
Processing that requires the obligatory DPIA
A data protection impact assessment referred to in paragraph 1 shall in particular be required in the case of:
(a) a systematic and extensive evaluation of personal aspects relating to natural persons which is based on automated processing, including profiling, and on which decisions are based that produce legal effects concerning the natural person or similarly significantly affect the natural person;
(b) processing on a large scale of special categories of data referred to in Article 9(1), or of personal data relating to criminal convictions and offences referred to in Article 10; or
(c) a systematic monitoring of a publicly accessible area on a large scale.
Legislative localisation Chapter IV, Section 3, Article 35, Paragraph 3
Regulation's subject matter Data protection impact assessment (Article 35, Section 3, Chapter IV)
Regulation category Definition
Regulation subcategory Provision
Actors concerned
Definition Controller
Knowww link