Basic information about the regulation

Name of regulation
Processing that requires the obligatory DPIA
Citation
A data protection impact assessment referred to in paragraph 1 shall in particular be required in the case of:
(a) a systematic and extensive evaluation of personal aspects relating to natural persons which is based on automated processing, including profiling, and on which decisions are based that produce legal effects concerning the natural person or similarly significantly affect the natural person;
(b) processing on a large scale of special categories of data referred to in Article 9(1), or of personal data relating to criminal convictions and offences referred to in Article 10; or
(c) a systematic monitoring of a publicly accessible area on a large scale.
Legislative localisation Chapter IV, Section 3, Article 35, Paragraph 3
Regulation
subject-matter
Data protection impact assessment (Article 35, Section 3, Chapter IV)
Regulation type Obligation
Regulation class Requirement
Subjects of regulation
Obligation Controller
Tree of knowledge link https://knowww.eu/nodes/5a0595ea4b5b5f00019038bb