# AEPD template DPIA report (private sector)

- Type: Tools
- Source: AEPD
- Date: 2026-11-11
- Original: https://www.aepd.es/es/documento/modelo-informe-EIPD-sector-privado-en.rtf
- Canonical: https://overview.legal/posts/623991
- Topics: DPIA, Controllers, Supervision, Supervisory Authorities

## Summary

The Spanish DPA’s model report for a data protection impact assessment in the private sector, in English: the sections Article 35(7) requires (description, necessity and proportionality, risks, measures) laid out as a document to fill in.

## Full text

The Spanish DPA’s model report for a data protection impact assessment in the private sector, in English: the sections Article 35(7) requires (description, necessity and proportionality, risks, measures) laid out as a document to fill in.

When to use it: You write a DPIA report and want the structure an authority expects.
Provisions: GDPR Art. 35(7).
Published by AEPD (supervisory authority), for Spain.
For: controllers, DPOs and privacy officers.
Free; available in English, Spanish.

Het modelrapport van de Spaanse toezichthouder voor een DPIA in de private sector, in het Engels: de onderdelen die artikel 35 lid 7 vraagt (beschrijving, noodzaak en evenredigheid, risico’s, maatregelen) als in te vullen document.

Wanneer gebruiken: Je schrijft een DPIA-rapport en wilt de opbouw die een toezichthouder verwacht.

---
Generated by overview.legal · https://overview.legal/posts/623991 · 2026-11-14