Seite 143
This paper discusses the obligation and systematic process of carrying out a Data Protection Impact Assessment (DPIA) as referred to in article 35 of the EU General Data Protection Regulation (GDPR). The DPIA is a process that identifies high risks to the rights and freedoms of data subjects, deriving threats and suitable technical and organisational measures.