GDPR-35-02 Human Oversight 35 — Data protection impact assessment

Seek DPO advice when conducting DPIA

Description

The controller must seek the advice of the data protection officer, where designated, when carrying out a data protection impact assessment.

Sign in to view the full obligation text, AI-generated applicability analysis, evidence checklists, and compliance mapping.

Conduct DPIA for high-risk processing

Conduct DPIA for systematic automated evaluation with legal effects

Conduct DPIA for large-scale special category data processing

Conduct DPIA for systematic large-scale public area monitoring

Establish and publish DPIA-required processing list

Communicate DPIA-required list to Board

Establish and publish DPIA-exempt processing list

Communicate DPIA-exempt list to Board

Apply consistency mechanism for cross-border lists

Include systematic description in DPIA

ReguLume automatically maps regulatory obligations to your system inventory, identifies compliance gaps, and generates remediation plans.

Get Started