Translations:Datenschutz-Folgenabschätzung/42/en

If the necessity of a DPIA is not specified by a clear obligation to perform or not perform it, it is at the discretion of the examiner to assess the necessity of performing the DPIA. The information provided by the Art. 29 Data Protection Working Party will help in this regard. The handling of the list of criteria is recommended using a rule of thumb as follows: A high risk exists in any case if at least two of the criteria of WP 248 (bottom) or at least one of the criteria of Art. 35 GDPR (top) are met. In this case a DPIA should be carried out.