engleski

GDPR and data protection impact assessment (DPIA)

The DPIA is a new requirement under the General Data Protection Regulation (GDPR) as a part of the “protection by design” principle. According to the Regulation, DPIA is needed where a type of processing in particular using new technologies, and taking into account the nature, scope, context and purposes of the processing, is likely to result in a high risk to the rights and freedoms of natural persons, the controller shall, prior to the processing, carry out an assessment of the impact of the envisaged processing operations on the protection of personal data. Author in this paper presents DPIA and GDPR compliance by introducing measures to reduce address risks to the rights and freedom of citizen’s privacy: protective measures, security measures and mechanisms to ensure the protection of personal data and also presents prior consultation of controller with the supervisory authority as legal requirement of GDPR before processing if the data protection impact assessment referred to Article 35 of GDPR.

data protection, DPIA, European union, GDPR, information security, personal data, privacy, risk analysis

nije evidentirano