| Name of regulation | ||
|---|---|---|
| Processing that requires the obligatory DPIA | ||
| Citation | ||
| A data protection impact assessment referred to in paragraph 1 shall in particular be required in the case of: (a) a systematic and extensive evaluation of personal aspects relating to natural persons which is based on automated processing, including profiling, and on which decisions are based that produce legal effects concerning the natural person or similarly significantly affect the natural person; (b) processing on a large scale of special categories of data referred to in Article 9(1), or of personal data relating to criminal convictions and offences referred to in Article 10; or (c) a systematic monitoring of a publicly accessible area on a large scale. |
||
| Legislative localisation | Chapter IV, Section 3, Article 35, Paragraph 3 | |
| Regulation subject-matter |
Data protection impact assessment (Article 35, Section 3, Chapter IV) | |
| Regulation type |
Obligation
|
|
| Regulation class | Requirement | |
| Subjects of regulation | ||
| Obligation | Controller |
|
| Tree of knowledge link | https://knowww.eu/nodes/5a0595ea4b5b5f00019038bb | |