Assessing Risks: Perspectives on the Data Protection Impact
summary
A regulatory audit of 50 companies (20 large, 30 medium) evaluated 172 submitted Data Protection Impact Assessments (DPIAs) against GDPR Article 35 requirements and found major gaps: many DPIAs omitted Article 35 references, failed to check Article 35(3) examples, or ignored the Article 35(7) blacklist. Common deficiencies included missing processing registers, no explicit risk methodology, and lack of measures tied to identified risks; the audit highlights a local methodology used at VW and recommends using tools such as the CNIL DPIA template.
AI-written summary · about
chapters (8)
- 0:00Introduction
- 0:47Legal foundations of DPIA
- 4:40Assessing Niedersachsen companies
- 12:35DSGVO implementation results
- 17:57Authority expectations for DPIA
- 19:21Data protection in autonomous driving
- 22:36Working with authorities and tools
- 24:43Tips for DPOs and conclusion
related talks
29mDPIA in practice typical hurdles and remedies
05m3 questions to – Dr Frank Schemmel
01h 16mSecurity meets data protection: risk assessment, standards and certification
46mGDPR: A Global View
01h 21mBalancing Data Protection and Workplace Justice GDPR’s Role in Employee Rights ..
01h 14mSenior Academic Session I
01h 01mAcademic sessions on data protection law and privacy
01h 11mAI AUDITS: BLACK BOX VS. WHITE BOX PERSPECTIVES