GDPR – Data Protection Impact Assessment (DPIA)
Description
Organizations and businesses must comply with the requirement of the GDPR regulation (Article 35) and the national Law 4624/2019 on the protection of personal data, regarding the obligation to carry out a Data Protection Impact Assessment (DPIA). The impact assessment (DPIA) is an important tool to ensure the compliance of a business or organization with the requirements of the GDPR regulation and the national Law 4624/2019 on the protection of personal data. It is essentially a process of assessing the impact of data processing on the rights and freedoms of individuals (data subjects). TÜV AUSTRIA HELLAS, through the Data Protection Impact Assessment (DPIA) service, enables companies or organizations to identify the risks to the personal data processed by an organization or company and to assess the significance of the impact on the privacy of the subjects of the data. An impact assessment is required when the processing of personal data is likely to cause a high risk to the rights and freedoms of individuals, such as, for example, the processing of sensitive data (special category data) or the systematic monitoring of data subjects on a large scale (e.g. CCTV).
Who is it addressed to?
Data Protection Impact Assessment (DPIA) service concerns and can be delivered to all businesses and organizations of the private and public sector that have an obligation to comply in accordance with the requirements of the GDPR regulation and the national Law 4624/2019 on the protection of personal data and specifically the requirement of article 35 for the need to carry out a personal data impact assessment.
Who do I contact for the service delivery?
Information Systems Inspection Division. Responsible: Thanasis Mitsakos, phone number: 30 210 5220920 ext.2045, email: thanasis.mitsakos@tuv.at.