Loading tools
Loading tools
Applies Regulation (EU) 2016/679 — Art. 35 DPIA triggers, the EDPB WP248 high-risk criteria, Art. 28(3) vendor DPAs and the Art. 83 fine tiers — to determine whether a Data Protection Impact Assessment is mandatory and produce a 0–100 privacy posture score with a prioritised 30-day remediation plan.
Does any processing systematically evaluate personal aspects through automated processing (including profiling) on which decisions are based that produce legal effects or similarly significantly affect people (Art. 35(3)(a); Art. 22)?
Applies if your algorithms automatically deny credit, reject job applications, calculate insurance premiums or terminate user accounts without meaningful human oversight.
// Answer all 20 questions to see your results. (0 answered)
Deterministic screening based on Regulation (EU) 2016/679, EDPB WP248 DPIA Guidelines and EDPB Guidelines 9/2022. Informational guidance only — not legal advice.
A second pair of eyes before the expensive mistakes. Get in touch for a strategy call.