All 99 Articles Chapter 4: Controller and Processor
Before high-risk processing — large-scale monitoring, sensitive data, new technologies — you must run a DPIA to identify and mitigate the risks. AI deployments frequently trigger this.
Key points
- Required for processing likely to result in a high risk.
- Must describe the processing, assess necessity and proportionality, and address risks.
Related articles
Practical guidance
These summaries are a plain-English orientation only and are not a substitute for the official text of the Regulation or for legal advice.
Need to apply Article 35?
Our data-protection lawyers turn the text into a plan.