Tools·Autoriteit PersoonsgegevensNL
Export
AP list of processing operations that always need a DPIA
The Dutch DPA’s list under Article 35(4) of the kinds of processing for which a DPIA is always required in the Netherlands (among them covert investigation, blacklists, fraud prevention, credit scores, genetic and biometric data, large-scale profiling and monitoring of employees), published in the Staatscourant in 2019. Not exhaustive: processing off the list can still need a DPIA under the EDPB criteria.
When to use itYou must decide whether a processing operation in the Netherlands needs a DPIA.
- Published by
- Autoriteit Persoonsgegevens (supervisory authority)
- Written for
- Netherlands
- For
- controllers, DPOs and privacy officers, public bodies
- Cost
- free
- Languages
- Dutch
- Provisions
- GDPR Art. 35(4)
Open the toolautoriteitpersoonsgegevens.nl
Description by overview.legal; the tool itself is the publisher’s.
How it connects
Other tools for the same task
CNIL CNIL lists of processing operations that do or do not need a DPIA The French DPA’s two lists under Article 35(4) and (5): the types of processing for which a DPIA is always required, and those for which it is not. Every national authority… FR
Rijksoverheid / AP AVG-regelhulp voor bedrijven The Dutch government’s online rule guide for businesses: a series of questions about your organisation and its processing, ending in a personal list of GDPR duties (register,… NL ·in Dutch
ICO ICO data protection self-assessment checklists Short self-assessment checklists from the UK regulator for small organisations: data protection assurance, information security, direct marketing, records management, data sharing… UK
Proton GDPR.eu compliance checklist A plain-language checklist of what a business must have in place under the GDPR: lawful basis and transparency, data security, accountability and governance, privacy rights.…
European Commission (AI HLEG) ALTAI: Assessment List for Trustworthy AI The self-assessment list of the Commission’s High-Level Expert Group on AI (2020): questions on the seven requirements for trustworthy AI, among them human oversight, robustness,…
EDPB Checklist for AI auditing (EDPB Support Pool of Experts) An end-to-end, socio-technical checklist for auditing an algorithm against data protection law, written by an external expert for the EDPB’s Support Pool of Experts at the AEPD’s…