Tools·AEPDEN
Export
Evalúa-Riesgo RGPD: does this processing need a DPIA? (AEPD)
An online tool of the Spanish DPA that makes a first risk analysis of one processing operation and tells whether it is likely to need a DPIA, using the high-risk criteria of the EDPB’s guidelines and the AEPD’s own lists.
When to use itYou are unsure whether a processing operation crosses the DPIA threshold of Art. 35(1) and (3).
- Published by
- AEPD (supervisory authority)
- Written for
- Spain
- For
- controllers, DPOs and privacy officers, SMEs
- Cost
- free
- Languages
- Spanish, English
- Provisions
- GDPR Art. 24, GDPR Art. 32, GDPR Art. 35
Open the toolaepd.es
Description by overview.legal; the tool itself is the publisher’s.
How it connects
Other tools for the same task
ICO ICO data protection self-assessment checklists Short self-assessment checklists from the UK regulator for small organisations: data protection assurance, information security, direct marketing, records management, data sharing… UK ·checklist
Standard NIST Privacy Framework The US National Institute of Standards and Technology’s voluntary framework for managing privacy risk in an organisation, organised in functions (identify, govern, control,… US ·NIST
CNIL CNIL PIA software (privacy impact assessment tool) Free, open-source software by the French DPA that guides a controller through a data protection impact assessment: describe the processing, assess necessity and proportionality,… calculator ·open source
AEPD Facilita RGPD (AEPD) The Spanish DPA’s questionnaire for businesses that process personal data with little risk (customers, staff, suppliers): from the answers it produces the minimum documents, such… ES ·calculator
Model ICO Data Protection Impact Assessment (DPIA) guidance and template The UK regulator’s step-by-step DPIA guidance with a downloadable template: screening questions to decide whether a DPIA is needed, how to describe the processing, consult, assess… UK ·ICO
Rijksoverheid / AP AVG-regelhulp voor bedrijven The Dutch government’s online rule guide for businesses: a series of questions about your organisation and its processing, ending in a personal list of GDPR duties (register,… NL ·checklist ·in Dutch