Useful material regarding data protection impact assessment and assessment of the risk
- Art. 29 Working Party’s Guidelines on Data Protection Impact Assessment (DPIA) and determining whether processing is “likely to result in a high risk” for the purposes of Regulation 2016/679 (WP 248) available at: https://uodo.gov.pl/en/516/909
- Art. 29 Working Party’s Opinion 03/2010 on the principle of accountability (WP 173) available at:https://ec.europa.eu/justice/article-29/documentation/opinion-recommendation/files/2010/wp173_en.pdf
- Art. 29 Working Party’s Opinion 04/2013 on the Data Protection Impact Assessment Template for Smart Grid and Smart Metering Systems (‘DPIA Template’) (WP 205) available at: https://ec.europa.eu/justice/article-29/documentation/opinion-recommendation/files/2013/wp205_en.pdf
- Art. 29 Working Party’s Opinion 07/2013 on the Data Protection Impact Assessment Template for Smart Grid and Smart Metering Systems (‘DPIA Template’) prepared by Expert Group 2 of the Commission’s Smart Grid Task Force (WP 209) available at: https://ec.europa.eu/justice/article-29/documentation/opinion-recommendation/files/2013/wp209_en.pdf
- Art. 29 Working Party’s Opinion 09/2011 on the revised Industry Proposal for a Privacy and Data Protection Impact Assessment Framework for RFID Applications: (WP 180) available at: https://ec.europa.eu/justice/article-29/documentation/opinion-recommendation/files/2011/wp180_en.pdf
- Art. 29 Working Party’s Statement on the role of a risk-based approach in data protection legal frameworks (WP 218) available at: https://uodo.gov.pl/en/516/920
- Commission Nationale de l'Informatique et des Libertés (CNIL)., Privacy Impact Assessment (PIA) Guidelines: https://www.cnil.fr/en/guidelines-dpia