![List of personal data processing activities that must be subject to a Data Protection Impact Assessment](https://www.gpasa.pt/xms/img/1400x720/738da/emM9VDMmcT05MCZmbHRyW109/L08zbS8tME0zWnJTbS95VnNnLmJwVXBoYS80eXpRL0ZaazdqazE1NHk0TDZzelE0eXR6dGRrcg.jpg)
Regulation no. 1/2018: List of personal data processing activities that must be subject to a Data Protection Impact Assessment (“DPIA”) was published on 16th October 2018.
The CNPD (Portuguese Data Protection Commission) has approved a list of personal data processing activities, especially the ones using new technologies, that are considered to be likely to result in a high risk to the rights and freedoms of natural persons and therefore must be subject to a Data Protection Impact Assessment (“DPIA”).
To know more about this Regulation, read our informative note here.