# Data protection impact assessment 35(5) — GDPR — provision context

> Focused context for a single provision (35(5)), curated from overview.legal on 2026-08-22. Canonical: https://overview.legal/laws/gdpr/art-35#par-5
> Verify against the official text (EUR-Lex / wetten.overheid.nl) before relying on it.

Part of **Data protection impact assessment** (GDPR, full article: https://overview.legal/laws/gdpr/art-35).

## Provision text

### 35(5)

The supervisory authority may also establish and make public a list of the kind of processing operations for which no data protection impact assessment is required. The supervisory authority shall communicate those lists to the Board.


## Topics on this provision

- **Privacy Impact Assessment** — https://overview.legal/topics/privacy-impact-assessment
  Data protection impact assessments (DPIA)
- **DPIA** — https://overview.legal/topics/dpia
  Data Protection Impact Assessment - systematic evaluation of processing risks
- **Supervisory Authorities** — https://overview.legal/topics/supervisory-authorities
  National data protection authorities and their powers
- **Supervision** — https://overview.legal/topics/toezicht
  Oversight and enforcement by supervisory authorities

## Cited by (exact-provision citations)

- **EDPB Annual Report 2019** (guidance) — https://overview.legal/posts/126163
- **Contribution of the EDPB to the evaluation of the GDPR under Article 97** (guidance) — https://overview.legal/posts/126182
- **Opinion 11/2019 on the draft list of the competent supervisory authority of the Czech Republic regarding the processing operations exempt from the requirement of a data protection impact assessment (Article 35(5) GDPR)** (guidance) — https://overview.legal/posts/126216
- **Opinion 13/2019 on the draft list of the competent supervisory authority of France regarding the processing operations exempt from the requirement of a data protection impact assessment (Article 35(5) GDPR)** (guidance) — https://overview.legal/posts/126218
- **Opinion 12/2019 on the draft list of the competent supervisory authority of Spain regarding the processing operations exempt from the requirement of a data protection impact assessment (Article 35(5) GDPR)** (guidance) — https://overview.legal/posts/126210
- **Opinion 6/2024 on the draft list of the Latvian SA on pro-cessing operations exempt from the data protection impact assessment requirement (Art. 35.5 GDPR)** (guidance) — https://overview.legal/posts/125762
- **EDPB Document on response to the request from the European Commission for clarifications on the consistent application of the GDPR, focusing on health research** (guidance) — https://overview.legal/posts/126069
- **Opinion 7/2020 on the draft list of the competent supervisory authority of France regarding the processing operations exempt from the requirement of a data protection impact assessment (Article 35(5) GDPR)** (guidance) — https://overview.legal/posts/126167
- **Opinion 6/2024 on the draft list of the Latvian SA on pro-cessing operations exempt from the data protection impact assessment requirement (Art. 35.5 GDPR)** §7 (guidance, EDPB) — https://overview.legal/posts/125762
- **Opinion 6/2024 on the draft list of the Latvian SA on pro-cessing operations exempt from the data protection impact assessment requirement (Art. 35.5 GDPR)** §6 (guidance, EDPB) — https://overview.legal/posts/125762
- **Opinion 6/2024 on the draft list of the Latvian SA on pro-cessing operations exempt from the data protection impact assessment requirement (Art. 35.5 GDPR)** §2 (guidance, EDPB) — https://overview.legal/posts/125762
- **EDPB Document on response to the request from the European Commission for clarifications on the consistent application of the GDPR, focusing on health research** §61 (guidance, EDPB) — https://overview.legal/posts/126069

---
Generated by overview.legal · https://overview.legal/laws/gdpr/art-35#par-5 · 2026-08-22