# Evalúa-Riesgo RGPD: does this processing need a DPIA? (AEPD)

- Type: Tools
- Source: AEPD
- Date: 2026-11-11
- Original: https://www.aepd.es/en/guias-y-herramientas/herramientas/evalua-riesgo-rgpd
- Canonical: https://overview.legal/posts/623975
- Topics: DPIA, Controllers, Supervision, Supervisory Authorities

## Summary

An online tool of the Spanish DPA that makes a first risk analysis of one processing operation and tells whether it is likely to need a DPIA, using the high-risk criteria of the EDPB’s guidelines and the AEPD’s own lists.

## Full text

An online tool of the Spanish DPA that makes a first risk analysis of one processing operation and tells whether it is likely to need a DPIA, using the high-risk criteria of the EDPB’s guidelines and the AEPD’s own lists.

When to use it: You are unsure whether a processing operation crosses the DPIA threshold of Art. 35(1) and (3).
Provisions: GDPR Art. 24, GDPR Art. 32, GDPR Art. 35.
Published by AEPD (supervisory authority), for Spain.
For: controllers, DPOs and privacy officers, SMEs.
Free; available in Spanish, English.

Online tool van de Spaanse toezichthouder die een eerste risicoanalyse van één verwerking maakt en zegt of er waarschijnlijk een DPIA nodig is, aan de hand van de hoog-risicocriteria van de EDPB en de lijsten van de AEPD.

Wanneer gebruiken: Je twijfelt of een verwerking de DPIA-drempel van art. 35 lid 1 en 3 haalt.

---
Generated by overview.legal · https://overview.legal/posts/623975 · 2026-11-14