Tools·CNILEN
Export
CNIL lists of processing operations that do or do not need a DPIA
The French DPA’s two lists under Article 35(4) and (5): the types of processing for which a DPIA is always required, and those for which it is not. Every national authority publishes such a list after the EDPB’s opinion on it.
When to use itYour processing takes place in France, or you compare how authorities draw the DPIA line.
- Published by
- CNIL (supervisory authority)
- Written for
- France
- For
- controllers, DPOs and privacy officers
- Cost
- free
- Languages
- French
- Provisions
- GDPR Art. 35(4), GDPR Art. 35(5)
Open the toolcnil.fr
Description by overview.legal; the tool itself is the publisher’s.
How it connects
Other tools for the same task
AP AP list of processing operations that always need a DPIA The Dutch DPA’s list under Article 35(4) of the kinds of processing for which a DPIA is always required in the Netherlands (among them covert investigation, blacklists, fraud… NL ·in Dutch
Rijksoverheid / AP AVG-regelhulp voor bedrijven The Dutch government’s online rule guide for businesses: a series of questions about your organisation and its processing, ending in a personal list of GDPR duties (register,… NL ·in Dutch
ICO ICO data protection self-assessment checklists Short self-assessment checklists from the UK regulator for small organisations: data protection assurance, information security, direct marketing, records management, data sharing… UK
Proton GDPR.eu compliance checklist A plain-language checklist of what a business must have in place under the GDPR: lawful basis and transparency, data security, accountability and governance, privacy rights.…
European Commission (AI HLEG) ALTAI: Assessment List for Trustworthy AI The self-assessment list of the Commission’s High-Level Expert Group on AI (2020): questions on the seven requirements for trustworthy AI, among them human oversight, robustness,…
EDPB Checklist for AI auditing (EDPB Support Pool of Experts) An end-to-end, socio-technical checklist for auditing an algorithm against data protection law, written by an external expert for the EDPB’s Support Pool of Experts at the AEPD’s…